AppThreat / sast-scanLinks
Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure DevOps, Google CloudBuild, VS Code and Visual Studio. No server required!
☆149Updated 5 years ago
Alternatives and similar repositories for sast-scan
Users that are interested in sast-scan are comparing it to the libraries listed below
Sorting:
- Security scanning & static analysis tool☆93Updated last year
- Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…☆854Updated 2 years ago
- OWASP Cloud Security - Enabling conversations through threat and control stories☆182Updated 6 years ago
- DevSecOps Toolchain☆112Updated 7 years ago
- The DevSecOps toolset for REST APIs☆277Updated 2 years ago
- Mixeway is security orchestrator for vulnerability scanners which enable easy plug in integration with CICD pipelines. MixewayHub project…☆110Updated last year
- Project intended to make Attack Maps part of software development by reducing the time it takes to complete them.☆48Updated 8 years ago
- A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestrat…☆279Updated last month
- Container Security Verification Standard☆58Updated 6 years ago
- Python API library for DefectDojo☆43Updated 2 years ago
- threatspec - continuous threat modeling, through code☆370Updated 4 years ago
- Finding exposed secrets and personal data in GitLab☆202Updated last year
- Checkmarx Scan and Result Orchestration☆99Updated last week
- Sample scan files for testing DefectDojo imports☆84Updated 2 months ago
- A pytest-inspired, DAST framework, capable of identifying vulnerabilities in a distributed, micro-service ecosystem through chaos enginee…☆227Updated last year
- ☆74Updated 5 years ago
- This repo is a consolidation of Secure Software Supply Chain resources, such as talks, whitepapers, conferences and more.☆139Updated 3 years ago
- Node application to help managing Maturity Models like the ones created by BSIMM and OpenSAMM☆195Updated 7 years ago
- ☆69Updated 4 months ago
- An open source, online threat modelling tool from OWASP☆483Updated 4 months ago
- General Open Architecture Security Questionnaire☆32Updated 2 years ago
- Find cloud assets that no one wants exposed 🔎 ☁️☆349Updated 5 years ago
- A comprehensive list of software composition analysis tools.☆156Updated last month
- The clever vulnerability dependency finder☆96Updated 3 years ago
- OWASP SecurityRAT (version 1.x) - Tool for handling security requirements in development☆185Updated 2 months ago
- A curated list of Software Component Analysis (SCA) books, courses - free and paid, videos, tools, and tutorials.☆107Updated 11 months ago
- Documenting your Threat Models with HCL☆438Updated this week
- OWASP Kubernetes Security Testing Guide☆38Updated 2 weeks ago
- for AWS Security material☆249Updated 3 years ago
- The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…☆155Updated last year