Awesome Open Source

Programming Languages

Search results for security sast

33 search results found

Terrascan ⭐ 4,500

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

Nodejsscan ⭐ 2,275

nodejsscan is a static security code scanner for Node.js applications.

Bearer ⭐ 1,554

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

Horusec ⭐ 1,000

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

Apkhunt ⭐ 580

APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their code.

Njsscan ⭐ 318

njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.

Threatplaybook ⭐ 266

A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestration

SecHub provides a central API to test software with different security tools.

Js X Ray ⭐ 196

JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.

Libsast ⭐ 106

Generic SAST Library

Clj Holmes ⭐ 85

A CLI SAST (Static application security testing) tool which was built with the intent of finding vulnerable Clojure code via rules that use a simple pattern language.

Intercept ⭐ 74

INTERCEPT / Policy as Code Auditing / SAST for Code & APIs

Grepmarx ⭐ 66

A source code static analysis platform for AppSec enthusiasts.

Api Oas Checker ⭐ 56

An OpenAPI 3 checker based on spectral.

Curated list of security tools

A lightweight static security analysis tool for modern Perl Apps

Codetotal ⭐ 27

Analyze any snippet, file, or repository to detect possible security flaws such as secret in code, open source vulnerability, code security, vulnerability, insecure infrastructure as code, and potential legal issues with open source licenses.

⚡️ A package API to run a static analysis of your module's dependencies. This is the CLI engine!

Awesome Software Supply Chain Security ⭐ 20

Sharing software supply chain security open source projects

Pypi Auto Scanner ⭐ 20

Automatically scan new pypi packages for potentially malicious code

Contrastscan Action ⭐ 19

Contrast Scan GitHub action

Cxanalytix ⭐ 18

Exports vulnerability scan data from the Checkmarx SAST platform for use in analytical tools.

Horusec Engine ⭐ 17

Horusec analysis engine

Appscan Codesweep Action ⭐ 17

Integrate static security testing with HCL AppScan CodeSweep with Github.

Checkmarx Github Action ⭐ 16

Checkmarx Scan Github Action

Astam Correlator ⭐ 16

Vulnerability consolidation and management tool, enhances scan results by merging different findings of the same weakness across multiple static/dynamic scans

Veracode Python ⭐ 13

Scan Action ⭐ 11

Github Action for security scanning utilizing Salus by Coinbase

Horusec Examples Vulnerabilities ⭐ 7

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

Devsecops Vault ⭐ 7

Collection of roadmaps, tools, best practice, resources about DevSecOps

Iameter_php ⭐ 6

Aws Codeguru Reviewer Cicd Cdk Sample ⭐ 6

CDK stack to enable CodeGuru Reviewer for selected GitHub repositories

Iam Sarif Report ⭐ 5

Validate your IAM Policies and SCPs with AWS Policy Validator, and convert those results into SARIF documents for reporting.

Related Searches

Security Vulnerabilities (12,297)

Laravel Security (11,580)

Php Security (10,611)

Javascript Security (3,024)

Java Security (2,494)

Html Security (2,284)

Python Security (1,733)

Golang Security (1,316)

Shell Security (1,213)

Security Penetration Testing (920)

1-33 of 33 search results

Privacy | About | Terms | Follow Us On Twitter

Copyright 2018-2024 Awesome Open Source. All rights reserved.