GL-Secure

SAST Analyzer based on Flawfinder

SAST Analyzer for mobile applications

Gemnasium Maven plugin for Dependency Scanning

Collection of shell scripts packaged with SAST analyzers to enable post-analyzer integrations.

SAST Analyzer based on Bandit

Dependency Scanning Analyzer based on Gemnasium.

SAST Analyzer based on tslint and its security plugin

archived in favor of eslint. gitlab-org/gitlab#229396

Deprecated. Container Scanning Analyzer for docker images based on clair and klar

SAST Analyzer based on ESLint and its security plugin.

Deprecated SAST Analyzer for Java Gradle projects. This analyzer is deprecated in favor of the new Spotbugs analyzer

Template project for building new Secure analyzers

Deprecated SAST Analyzer based on Find Sec Bugs. This analyzer is deprecated in favor of the new Spotbugs analyzer

Deprecated SAST Analyzer for Groovy projects. This analyzer is deprecated in favor of the new Spotbugs analyzer

Dependency Scanning Analyzer based on Retire.js

Dependency Scanning Analyzer for Python projects based on Gemnasium.

Gemnasium Maven plugin for Dependency Scanning

Deprecated SAST Analyzer based on Go AST Scanner, in favor of the new Gosec Analyzer

Deprecated SAST Analyzer for Scala sbt projects. This analyzer is deprecated in favor of the new Spotbugs analyzer

Dependency Scanning Analyzer for Java Maven projects based on Gemnasium.

Dependency Scanning Analyzer based on bundler-audit.