S

static analysis

A static analysis tool to draw an application map, which is similar to a context map although more accurate and detailed.

Secret Detection scans your repository to help prevent your secrets from being exposed.

Static Application Security Testing (SAST) checks your source code for known vulnerabilities.

Examples for GitLab CI/CD integration with Parasoft Jtest

GitLab CI/CD configuration file designed for building, testing, and analyzing .NET Core projects

Gratis, libre and open source server providing code assistance for PHP. https://serenata.gitlab.io/

Examples for GitLab CI/CD integration with Parasoft C/C++test

Integrate OpenText Application Security (Fortify) with full access to 'fcli' commands for SAST, DAST, SCA, reporting and REST API capabilities.

Code checker script provides the way to check the quality of the Interitty codes.

DEPRECATED. Please see CodeClimate-based Code Quality scanning will be removed.

Veracode upload and scan component. This component will run a Veracode static scan as Sandbox scan or as policy scan.

Veracode Pipeline Scan Component This Veracode Pipeline Scan component runs the Veracode pipeline-scan as an action on any GitHub pipeline

The only pre-requisites is to have the application compiled/packaged according the Veracode Packaging Instructions here

About The pipeline-scan component is designed to be used in a CI/CD pipeline to submit a binary or source code zip to Veracode for security scanning.

For more information on Pipeline Scan, visit the Veracode Docs.

Examples for GitLab CI/CD integration with Parasoft dotTEST

Performs interprocedural and intraprocedural PointsTo analysis on static Java methods using a bounded call string approach.

Repository around the Dynamic Analysis and privacy breakdowns of popular applications.

tiny utility program for type-analysis of shell pipelines based on ladder-typing

Repository to demonstrate sample issues in Python raised by DeepSource.

https://deepsource.io/gl/deepsourcelabs/demo-python/issues/

Repository to demonstrate sample issues in Go raised by DeepSource.

Results: https://deepsource.io/gl/deepsourcelabs/demo-go/issues/