The Curious Engineer

All blogs / Dev tools / editors / IDEs

Sourcegraph Blog

sourcegraph.com/blog

Product updates, engineering notes, and perspectives from Sourcegraph.

Dev tools / editors / IDEsSecurityAI / ML

’25’26
Posts
117 from 28 Jan 2025 to 21 Oct 2026
Posting
weekly (94 in the last year)
Kind
company blog
Feed
https://sourcegraph.com/blog/feed.rss

2026 83

  1. php2shell: patching PHP is easy, finding it is the hard part
  2. The runbook is out of date and the code shipped an hour ago
  3. Monorepo vs Polyrepo: Pros, Cons & How to Choose (2026)
  4. What is InnerSource?
  5. Automated vulnerability remediation: How it works
  6. Vulnerability prioritization: A 2026 guide
  7. Vulnerability Remediation: A Practical Guide
  8. What is vulnerability management? A 2026 guide
  9. Software cycle time: a complete guide to measuring and reducing it
  10. Cyclomatic Complexity: What It Is and How to Reduce Code Complexity
  11. Code Security: A Practical 2026 Playbook
  12. AI Developer Tools: The 2026 Guide to AI Coding Tools
  13. 13 Best Automated Code Review Tools in 2026: AI and Static Analysis Compared
  14. SCA Tools: The Best Options in 2026 Compared
  15. SAST Tools in 2026: A Buyer's Guide & Comparison
  16. The autonomous codebase
  17. Agentic Coding in 2026: What It Is and How It Works
  18. Coding agents usually can't price on outcomes. Ours can.
  19. Context Engineering for AI Agents: Complete 2026 Guide
  20. Introducing Agentic Batch Changes: the frontier agent for code change at scale
  21. Best Developer Experience Tools for 2026 (19 Compared)
  22. Best AI Coding Assistant: 12 Tools Compared for 2026
  23. 15 Best Static Code Analysis Tools in 2026 (Compared)
  24. DAST tools in 2026: How to choose the right one
  25. DevSecOps Tools: The 2026 Toolchain Guide
  26. SAST vs DAST: Key Differences Explained
  27. A smarter way to run code migrations with less LLM context
  28. Make Claude Code's @ picker search symbols, not filenames
  29. How to evaluate Sourcegraph on your own codebase
  30. Compliance-first AI: proving agent provenance for regulated engineering teams
  31. Code Finder: fast, efficient code search for coding agents
  32. AI Code Refactoring: How to Refactor at Scale
  33. AI Software Development: A Practical Guide
  34. AngularJS to React Migration: A Practical Playbook
  35. Dependency upgrade automation across repos
  36. Large-scale code changes: how to do them safely
  37. Three places enterprise security breaks down at codebase scale (and why your current tools don't cover them)
  38. Detection in one repo isn't a security posture
  39. Agentic Batch Changes is now in public beta
  40. 10 Best Source Code Tools for Large Codebases (2026)
  41. Developer Onboarding in 2026: Process, Checklist & Tools
  42. Documentation as Code: A Practical Guide for Dev Teams
  43. On owning a codebase, and why it may be the hardest job in software
  44. Why your migration tools are failing your engineers
  45. 12 Code Refactoring Techniques for Cleaner Code in 2026
  46. 10 Best Code Refactoring Tools for Developers in 2026
  47. How to Measure Technical Debt: Metrics, Formulas & Tools
  48. The 11 Types of Technical Debt (With Real Examples)
  49. Sourcegraph MCP server and a cheaper model beat a Mythos-class model alone
  50. The hidden cost of code that nobody touches
  51. How to Reduce Technical Debt in 2026: 9 Proven Strategies
  52. Technical Debt Management: A Complete Guide for 2026
  53. Why developers misread huge monolithic codebases without code intelligence
  54. Automating Security Triage with HackerOne and Deep Search
  55. AI Code Generation in 2026: How It Works, Tools, and Best Practices
  56. Security Automation Evolved: From SlackOps to Programmatic SIEM Triage (Part 1/2)
  57. Dependency prefixes are a supply chain risk: let's fix them
  58. The Code Review Checklist for Engineering Teams
  59. Legacy Code Modernization: A Practical Guide for Engineering Teams
  60. How we're using Sourcegraph and a Slack bot to detect vulnerabilities and react quickly
  61. Why coding agents fail in large codebases (and what to do about it)
  62. Lessons on UX, security, and scale when building an enterprise-grade Slack agent
  63. Best Monorepo Build Tools for Engineering Teams (2026)
  64. Deep Search: AI-Powered Code Search for Complex Codebases
  65. Perforce vs Git: Key Differences and When to Use Each
  66. Deep Search: The AI-powered tool helping engineers navigate codebases they didn't write
  67. Takeaways from "Driving Engineering Initiatives in Large Codebases"
  68. Code Search, Deep Search, or MCP: When to Use Each
  69. What it actually takes to run code intelligence in-house
  70. Change failure rate: What it is and how to improve it in 2026
  71. The evolution of code intelligence: Beyond search
  72. Detecting supply chain attacks at scale with Deep Search
  73. The future of SCIP
  74. MCP stories from the field
  75. CodeScaleBench: Testing coding agents on large codebases and multi-repo software engineering tasks
  76. A new era for Sourcegraph: The intelligence layer for AI coding agents and developers
  77. Building DataBot: Our always-on data assistant
  78. How our support engineers use Deep Search to investigate customer issues faster
  79. Cross-repository code navigation
  80. Introducing the new Sourcegraph changelog
  81. Tools for companies that don't need Sourcegraph
  82. DevOps transformation: A complete guide for 2026
  83. Weekly updates are coming to Sourcegraph Cloud

2025 34

  1. Secret detection in code: A complete guide for 2026
  2. Episode III: Revenge of the React vulnerabilities
  3. Why code search at scale is essential when you grow beyond one repository
  4. Fixing the React2Shell vulnerability in large and complex enterprise codebases (part 2)
  5. Agentic coding is creating more code. More code is creating a bigger need for Code Search
  6. Hunting down the React2Shell vulnerability across enterprise codebases (part 1)
  7. A note from Dan
  8. Why Sourcegraph and Amp are becoming independent companies
  9. Star your favorite Deep Search threads
  10. Agile metrics: What to track and why they matter (2026)
  11. Asynchronous software development: How distributed engineering teams ship faster
  12. Deep Search goes GA, now with role-based permissions
  13. Semantic Code Search: What it is and how it works
  14. Changes to Cody Free, Pro, and Enterprise Starter plans
  15. Introducing Deep Search: A faster way to understand your code
  16. The brute squad
  17. Batch Changes is better than ever
  18. Sourcegraph is now ISO 27001:2022 certified
  19. Keeping it boring (and relevant) with BM25F
  20. Lessons from building Sherlock: Automating security code reviews with Sourcegraph
  21. Beyond working set memory: understanding the cAdvisor memory metrics
  22. Revenge of the junior developer
  23. Multi-repo search: How to search across multiple repositories
  24. SOC 2 compliance for developers: A complete guide
  25. Developer productivity: How to measure and improve it
  26. Engineering metrics: What actually matters in 2026
  27. SDLC best practices and tools: A complete guide (2026)
  28. Lessons from building AI coding assistants: Context retrieval and evaluation
  29. Combining chat and search in a single input with Sourcegraph 6.0
  30. Introducing Sourcegraph Enterprise Starter
  31. Agentic chat - think twice, answer once
  32. The software industrial revolution: AI agents for enterprise development
  33. Enter flow state with auto-edit
  34. Priceline's innovations in agentic AI with Sourcegraph