SAST Analyzer for Salesforce Apex projects based on pmd
SAST Analyzer based on Semgrep
SAST Analyzer based on Go AST Scanner
Dependency Scanning Analyzer based on Gemnasium.
SAST Analyzer for Kubernetes manifests based on kubesec
SAST Analyzer for detecting leaked secrets
SAST Analyzer based on ESLint and its security plugin.
GitLab Analyzer for Infrastructure as Code (IaC) projects that calls kics. This analyzer is written in Go using the command library shared by all analyzers.
Go packages to implement analyzers
SAST Analyzer based on SpotBugs and Find Sec Bugs.
SAST Analyzer based on phpcs-security-audit
Dependency Scanning Analyzer for Java Maven projects based on Gemnasium.
SAST Analyzer based on Brakeman
SAST Analyzer for NodeJS projects
Dependency Scanning Analyzer for Python projects based on Gemnasium.
SAST Analyzer based on Bandit
SAST Analyzer for .NET projects
Dependency Scanning Analyzer based on Retire.js
Dependency Scanning Analyzer based on bundler-audit.
SAST Analyzer for Phoenix Elixir projects based on sobelow