I think it's funny that I don't see any findings from either Claude or DataDog that couldn't be detected using static analysis. They're pretty simple code bases and maybe that's why.

I'll pay more attention when they start finding vulnerabilities in commonly used, more complex applications.

Ah, then you’ll want to check out xbow -

https://xbow.com/blog

I believe some folks here (moyix) are active with the project.