GL-Secure

Analyzer that scans for application dependencies.

Dependency Scanning Analyzer based on Gemnasium.

SAST Analyzer for detecting leaked secrets

SAST Analyzer based on SpotBugs and Find Sec Bugs.

Codequality jobs in pipelines https://docs.gitlab.com/ee/user/project/merge_requests/code_quality.html

Collection of shell scripts packaged with SAST analyzers to enable post-analyzer integrations.

Deprecated. Container Scanning Analyzer for docker images based on clair and klar

Deprecated SAST Analyzer based on Find Sec Bugs. This analyzer is deprecated in favor of the new Spotbugs analyzer

Deprecated SAST Analyzer for Groovy projects. This analyzer is deprecated in favor of the new Spotbugs analyzer

Gemnasium Maven plugin for Dependency Scanning