SAST

SAST Analyzer for Salesforce Apex projects based on pmd

SAST Analyzer based on Semgrep

SAST Analyzer based on Go AST Scanner

SAST Analyzer for Kubernetes manifests based on kubesec

Test project for Java Gradle

SAST Analyzer for detecting leaked secrets

Test project with: Language: Python - Package Manager: Pip

SAST Analyzer based on ESLint and its security plugin.

GitLab Analyzer for Infrastructure as Code (IaC) projects that calls kics. This analyzer is written in Go using the command library shared by all analyzers.

Go packages to implement analyzers

SAST Analyzer based on SpotBugs and Find Sec Bugs.

Test project with: Language: C

SAST Analyzer based on phpcs-security-audit

A project containing leaked secrets and tokens.

SAST Analyzer based on Brakeman

SAST Analyzer for NodeJS projects

Test project for Java Groovy

Test project with: Language: Java - Package Manager: Maven

Test project with: Language: Java - Package Manager: Maven - Type: MultiModule

Test project with: Language: Scala - Package Manager: Sbt