S

SAST

Test project for Java Gradle

Test project with: Language: Scala - Package Manager: Sbt

Setup Static Application Secret Testing (SAST) in GitLab CI pipeline using NJSScan and Semgrep.

A minimal custom SAST scanner that detects when web applications are configured to run in debug mode. Built in Rust as a tutorial for integrating third-party security scanners with GitLab Secure.

AI Code Security — four agents that catch what SAST misses in AI-generated code. Built on GitLab Duo Agent Platform.

Convert from SARIF to GitLab Code Quality and SAST report.

A project containing "vulnerable" code for testing GitLab SAST functionality.

Go package for implementing customized rulesets for SAST analyzers

Collection of shell scripts packaged with SAST analyzers to enable post-analyzer integrations.

Test project for Java Gradle with Kotlin build script

Test project with: Language: Go - Package Manager: Go mod

Test project with: Language: Python - Package Manager: Pipenv

Test project with: Language: Java - Package Manager: Maven - Type: MultiModule

Test project with: Language: Php - Package Manager: Composer

Go packages to implement analyzers

This project serves as a comprehensive reference implementation for enterprise DevSecOps practices, demonstrating how security, automation, and observability integrate seamlessly in modern cloud applications.

This project sets up Static Application Security Testing (SAST) in a GitLab CI/CD pipeline using two tools:

NJSScan → A security scanner specialized for JavaScript applications. It analyzes source code and flags insecure coding patterns and vulnerabilities.

Semgrep → A lightweight, multi-language static analysis tool that uses rulesets (such as p/javascript) to detect vulnerabilities, insecure practices, and style issues across different programming languages.

AI-powered security scanner that finds vulnerabilities and provides one-click fixes directly in GitLab merge requests. A reusable CI/CD Catalog component built with Google Cloud Vertex AI.

Components for running Puma Scan in GitLab CI/CD pipelines.