S

SAST

SAST Analyzer based on Semgrep

Static Application Security Testing (SAST) checks your source code for known vulnerabilities.

SAST Analyzer for detecting leaked secrets

GitLab's semgrep container image augmented with hundreds of additional Node.js/JavaScript/Typescript and Go rules from Semgrep's rule repository.

Test project with: Language: Php - Package Manager: Composer

SAST Analyzer for Kubernetes manifests based on kubesec

SAST Analyzer for Salesforce Apex projects based on pmd

Test project with: Language: Scala - Package Manager: Sbt

Go package for implementing customized rulesets for SAST analyzers

SAST Analyzer for Phoenix Elixir projects based on sobelow

GitLab Analyzer for Infrastructure as Code (IaC) projects that calls kics. This analyzer is written in Go using the command library shared by all analyzers.

SAST Analyzer based on SpotBugs and Find Sec Bugs.

Test project for Java Gradle with Kotlin build script

Test project with: Language: Go - Package Manager: Go mod

Test project with: Language: Python - Package Manager: Pipenv

Test project for Java Gradle

Test project with: Language: Java - Package Manager: Maven - Type: MultiModule

Test project with: Language: Java - Package Manager: Maven

Convert from SARIF to GitLab Code Quality and SAST report.

Go package for implementing shared vulnerability structs for secure analyzers