Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their code.

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Ful…

Automatically detect potential vulnerabilities and analyze repository metrics to prioritize open source security research targets

sdlc 是一个基于 Go 语言构建的安全漏洞示范平台，旨在促进 DevSecOps 和安全开发生命周期 (SDLC) 实践。它通过模拟常见漏洞来增强开发人员的安全意识，除了可以用于devsecops以外，还可以用于安全行业从事者学习漏洞知识或者渗透知识，代码审计，提供了一个实践和学习的环境。本项目采用了前后端分离的设计模式，其中后端利用了轻量级框架 Gin，而前端则使用了 Vue 3。

INTERCEPT / Policy as Code Auditing & Compliance

Language Server used by IDEs as Snyk Backend for Frontends

Code Pathfinder, the open-source alternative to GitHub CodeQL built with GoLang. Built for advanced structural search, derive insights, find vulnerabilities in code.

Horusec analysis engine

Oversecured Step for Bitrise

Multitool for Enhancing Code Security

Github Action Example with Semgrep SAST

CLI tool to export data from CxSAST and import into Checkmarx Application Security Testing Platform

Bagel is a simple web UI for Semgrep

Simple regex matcher that should be used as simple manual checker for secrets in your file

A little tool to fastly test if AWS IAM keys are valid

run detail report of security code scanning to notion and slack

Download apk files for static analysis