AppThreat / sast-scanLinks
Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure DevOps, Google CloudBuild, VS Code and Visual Studio. No server required!
☆148Updated 4 years ago
Alternatives and similar repositories for sast-scan
Users that are interested in sast-scan are comparing it to the libraries listed below
Sorting:
- Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…☆842Updated last year
- Container Security Verification Standard☆58Updated 5 years ago
- OWASP Cloud Security - Enabling conversations through threat and control stories☆180Updated 6 years ago
- The DevSecOps toolset for REST APIs☆274Updated 2 years ago
- Security scanning & static analysis tool☆94Updated 7 months ago
- Dynamic Application and API Security Testing☆192Updated 2 years ago
- threatspec - continuous threat modeling, through code☆357Updated 4 years ago
- ☆57Updated 4 years ago
- A comprehensive list of software composition analysis tools.☆147Updated last year
- This repo is a consolidation of Secure Software Supply Chain resources, such as talks, whitepapers, conferences and more.☆138Updated 2 years ago
- A container analysis and exploitation tool for pentesters and engineers.☆666Updated last year
- DevSecOps Toolchain☆112Updated 7 years ago
- Security testing tool for Kubernetes, abusing kubelet credentials on public cloud providers.☆161Updated last year
- Benchmarking repo for secrets scanning☆231Updated 9 months ago
- Finding exposed secrets and personal data in GitLab☆198Updated 6 months ago
- A Continuous Threat Modeling methodology☆319Updated 2 years ago
- A security monitoring solution for Kubernetes☆132Updated last year
- ☆123Updated last year
- A pytest-inspired, DAST framework, capable of identifying vulnerabilities in a distributed, micro-service ecosystem through chaos enginee…☆221Updated last year
- OpenAPI 2.0 (Swagger) fuzzer written in python. Basically TnT for your API.☆111Updated 2 years ago
- ☆415Updated 2 years ago
- Scan your EC2 instance to find its vulnerabilities using Vuls (https://vuls.io/en/)☆88Updated 2 years ago
- A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestrat…☆279Updated last week
- for AWS Security material☆247Updated 3 years ago
- ☆63Updated 2 years ago
- Find secrets in your codebase☆123Updated 2 months ago
- ☆74Updated 4 years ago
- Mixeway is security orchestrator for vulnerability scanners which enable easy plug in integration with CICD pipelines. MixewayHub project…☆109Updated last year
- Evaluation Framework for Dependency Analysis (EFDA)☆43Updated 3 years ago
- Project intended to make Attack Maps part of software development by reducing the time it takes to complete them.☆48Updated 8 years ago