GL-Secure

Analyzer that scans for application dependencies.

SAST Analyzer based on Semgrep

Dependency Scanning Analyzer based on Gemnasium.

SAST Analyzer for Kubernetes manifests based on kubesec

SAST Analyzer for .NET projects

SAST Analyzer for detecting leaked secrets

SAST Analyzer for Salesforce Apex projects based on pmd

Go packages to implement analyzers

Go package for implementing shared vulnerability structs for secure analyzers

Go package for implementing customized rulesets for SAST analyzers

Go package for implementing shared vulnerability command interface for secure analyzers

GitLab Analyzer for Infrastructure as Code (IaC) projects that calls kics. This analyzer is written in Go using the command library shared by all analyzers.

SAST Analyzer for Phoenix Elixir projects based on sobelow

SAST Analyzer based on SpotBugs and Find Sec Bugs.

Codequality jobs in pipelines https://docs.gitlab.com/ee/user/project/merge_requests/code_quality.html

SAST Analyzer based on Go AST Scanner

A post-processor for computing the scope+offset fingerprint.

SAST Analyzer based on Brakeman

SAST Analyzer for NodeJS projects

SAST Analyzer based on phpcs-security-audit