S

SAST

Anura is an open-source harness platform built by the security research community to create an independent, realistic benchmark for AI systems used in security research. It runs models and agents against real public, authorized bug bounty scopes and security artifacts, then measures what they actually discover, validate, and reject in practical investigations.

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

This GitLab CI/CD pipeline implements a complete DevSecOps and GitOps workflow for a containerized application. It performs Dockerfile linting, builds and pushes images with Kaniko, runs Gitleaks and Trivy security scans, generates a CycloneDX SBOM, updates Kubernetes manifests through GitOps, performs DAST using OWASP ZAP and Nuclei, and generates a unified HTML security report with all scan results.

SAST Analyzer for .NET projects

A project containing "vulnerable" code for testing GitLab SAST functionality.

Test project with: Language: Elixir - Package Manager: Mix - Framework: Phoenix

A composite project that features all the languages supported by GitLab SAST.

Test project with: Language: Ruby - Package Manager: Bundler - Framework : Rails

AI DevSecOps Serverless Scanners.

An example project staged to demonstrate the usage of Veracode's SAST scanning tools within CI/CD pipeline.