GL-Secure

Analyzer that scans for application dependencies.

GitLab Analyzer for Infrastructure as Code (IaC) projects that calls kics. This analyzer is written in Go using the command library shared by all analyzers.

A post-processor for computing the scope+offset fingerprint.

SAST Analyzer based on Semgrep

SAST Analyzer for mobile applications

SAST Analyzer for Kubernetes manifests based on kubesec

Deprecated. Container Scanning Analyzer for docker images based on clair and klar

SAST Analyzer for Salesforce Apex projects based on pmd

SAST Analyzer for Phoenix Elixir projects based on sobelow

SAST Analyzer based on SpotBugs and Find Sec Bugs.

SAST Analyzer for detecting leaked secrets

Dependency Scanning Analyzer based on Gemnasium.

Dependency Scanning Analyzer based on Gemnasium.

Dependency Scanning Analyzer based on Retire.js

SAST Analyzer for NodeJS projects

SAST Analyzer based on phpcs-security-audit

SAST Analyzer based on Brakeman

SAST Analyzer based on Flawfinder