SAST

This repository is part of a master thesis featured on https://scrap.tantemalkah.at and highlights the evaluation of currently maintained F/LOSS static analysis tools for PHP.

An example project staged to demonstrate the usage of Veracode's SAST scanning tools within CI/CD pipeline.

Test project with: Language: Apex - Package Manager: SFDX

Test project with: Language: Ruby

Test project with: Language: Elixir - Package Manager: Mix - Framework: Phoenix

This project is for free tier self hosted GitLab users who are running the SAST and Password Detection scrips and looking for a way to add them visibly to the merge request.

Test project for Java Gradle with Kotlin build script

Gitlab CI / CD templates for easy jobs and pipelines

Test project with: Language: C++

A project containing "vulnerable" code for testing GitLab SAST functionality.

A project containing clientside javascript (*.js & *.html)

Test project with: Language: Typescript - Package Manager: Yarn

Test project with: Language - kubernetes

Test project with: Language: C

Test project with: Language: Go

Security scans as pipeline jobs. SAST, Secret Detection, etc.

.NET 6 Project - forked from .NET 5 project