A declarative static analysis tool for jvm bytecode based Datalog like CodeQL

🐚 GitHub Action for running ShellCheck differentially

CloudDefense.ai is an automated web application security testing tool that audits your web applications by checking for vulnerabilities like SQL Injection, Cross-site scripting and other exploitable vulnerabilities.

Blazingly fast source code scanner for data security and privacy.

This GitHub Action allows you to run Gitleaks in your GitHub workflow.

Github Action for security scanning utilizing Salus by Coinbase

pre-commit hooks to run snyk

A simple GitHub Action for AWS CloudFormation static code analysis to improve infrastructure-as-code security.

GItHub Action for cfn-guard and aws-guard-rules-registry

Action to execute clj-holmes in Clojure/Clojurescript projects.

Static Application Security Testing (SAST) using Sonarqube workshop

Scanner-One is a freely usable Static Application Security Testing (SAST) scanner for all source code languages. Currently functional for Cpp, Java, Javascript, PHP and Python.

GitHub Action for Steampunk Spotter

Customized toolbox to perform offline scanning of a code base.

This repo holds the SAST-SCANNER Dockerfile used in Command Center Scanner.

A script to automate SAST analysis of your decompiled APKs with Checkmarx, and a Dockerfile if you ever need it.

blackduckcopilot

pre-commit hooks to run grype