GL-Secure

GitLab Analyzer for Infrastructure as Code (IaC) projects that calls kics. This analyzer is written in Go using the command library shared by all analyzers.

SAST Analyzer for detecting leaked secrets

Dependency Scanning Analyzer based on Gemnasium.

Go package for implementing shared vulnerability command interface for secure analyzers

Go package for implementing customized rulesets for SAST analyzers

SAST Analyzer based on Semgrep

Go package for implementing shared vulnerability structs for secure analyzers

Codequality jobs in pipelines https://docs.gitlab.com/ee/user/project/merge_requests/code_quality.html

SAST Analyzer based on Bandit

SAST Analyzer based on Flawfinder

SAST Analyzer for mobile applications

SAST Analyzer for Kubernetes manifests based on kubesec

SAST Analyzer for Salesforce Apex projects based on pmd

SAST Analyzer for NodeJS projects

SAST Analyzer based on ESLint and its security plugin.

Collection of shell scripts packaged with SAST analyzers to enable post-analyzer integrations.

A post-processor for computing the scope+offset fingerprint.

Gemnasium Maven plugin for Dependency Scanning

SAST Analyzer based on phpcs-security-audit

SAST Analyzer based on SpotBugs and Find Sec Bugs.