S

SAST

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Static Application Security Testing (SAST) checks your source code for known vulnerabilities.

The uConsole Repo Scan Reporter is a small local workflow for scanning Git repositories with Semgrep and Gitleaks, sending the scanner evidence to a custom Fabric pattern, and optionally publishing the resulting security triage report to Atlassian Confluence. The goal is to provide a lightweight, repeatable workflow for application security engineers, security-minded developers, and field testers who want a local-first way to produce useful security review notes from open source or internal repositories.

SAST Analyzer based on SpotBugs and Find Sec Bugs.

Codequality jobs in pipelines https://docs.gitlab.com/ee/user/project/merge_requests/code_quality.html

AI Code Security — four agents that catch what SAST misses in AI-generated code. Built on GitLab Duo Agent Platform.

Collection of shell scripts packaged with SAST analyzers to enable post-analyzer integrations.

This project serves as a comprehensive reference implementation for enterprise DevSecOps practices, demonstrating how security, automation, and observability integrate seamlessly in modern cloud applications.

AI-powered security scanner that finds vulnerabilities and provides one-click fixes directly in GitLab merge requests. A reusable CI/CD Catalog component built with Google Cloud Vertex AI.

An end to end DevSecOps pipeline with features including SAST Scanning of the Source code, SBOM management, and Container image scan, before pushing to EKS.

Shiftleft CLI auto builder for Docker Hub

This repository is part of a master thesis featured on https://scrap.tantemalkah.at and highlights the evaluation of currently maintained F/LOSS static analysis tools for PHP.