AppThreat / sast-scan
Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure DevOps, Google CloudBuild, VS Code and Visual Studio. No server required!
☆147Updated 4 years ago
Related projects ⓘ
Alternatives and complementary repositories for sast-scan
- threatspec - continuous threat modeling, through code☆332Updated 3 years ago
- Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…☆805Updated last year
- OWASP Cloud Security - Enabling conversations through threat and control stories☆177Updated 5 years ago
- A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestrat…☆274Updated 2 weeks ago
- Container Security Verification Standard☆57Updated 5 years ago
- Finding exposed secrets and personal data in GitLab☆195Updated this week
- Benchmarking repo for secrets scanning☆228Updated 2 months ago
- SonarQube plugin for identifying hardcoded secrets, such as passwords, API keys, AWS credentials, etc..☆100Updated 11 months ago
- A container analysis and exploitation tool for pentesters and engineers.☆626Updated last year
- The DevSecOps toolset for REST APIs☆270Updated last year
- Project intended to make Attack Maps part of software development by reducing the time it takes to complete them.☆46Updated 7 years ago
- A pytest-inspired, DAST framework, capable of identifying vulnerabilities in a distributed, micro-service ecosystem through chaos enginee…☆209Updated 6 months ago
- DevSecOps Toolchain☆109Updated 6 years ago
- Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.☆588Updated 4 years ago
- Security scanning & static analysis tool☆93Updated 3 weeks ago
- Node application to help managing Maturity Models like the ones created by BSIMM and OpenSAMM☆187Updated 6 years ago
- Checkmarx Scan and Result Orchestration☆88Updated this week
- The Swiss Army Container for Cloud Native Security. Container with all the list of useful tools/commands while hacking and securing Conta…☆262Updated last year
- Scan your code for security misconfiguration, search for passwords and secrets.☆637Updated last year
- Checks whether Docker is deployed according to security best practices as defined in the CIS Docker Benchmark☆209Updated 7 months ago
- Python API library for DefectDojo☆40Updated last year
- A comprehensive list of software composition analysis tools.☆123Updated 5 months ago
- Mixeway is security orchestrator for vulnerability scanners which enable easy plug in integration with CICD pipelines. MixewayHub project…☆107Updated 7 months ago
- Cloud-related research releases from the Rhino Security Labs team.☆355Updated 4 years ago
- CIS Docker Benchmark - InSpec Profile☆488Updated last year
- Generic SAST Library☆124Updated this week
- Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).☆122Updated last year
- A Continuous Threat Modeling methodology☆311Updated 2 years ago
- ☆121Updated last year