Alternatives and similar repositories for sast-scan:

Users that are interested in sast-scan are comparing it to the libraries listed below

• owasp-cloud-security / owasp-cloud-security
  OWASP Cloud Security - Enabling conversations through threat and control stories
  ☆179Updated 6 years ago
• ShiftLeftSecurity / sast-scan
  Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…
  ☆830Updated last year
• OWASP / Container-Security-Verification-Standard
  Container Security Verification Standard
  ☆58Updated 5 years ago
• nccgroup / G-Scout
  Google Cloud Platform Security Tool
  ☆234Updated 5 years ago
• k8scop / k8s-security-dashboard
  A security monitoring solution for Kubernetes
  ☆131Updated last year
• duo-labs / secret-bridge
  Monitors Github for leaked secrets
  ☆196Updated 4 months ago
• zemmali / DevSecOps-Toolchain
  DevSecOps Toolchain
  ☆111Updated 7 years ago
• PaperMtn / gitlab-watchman
  Finding exposed secrets and personal data in GitLab
  ☆197Updated 3 months ago
• thought-machine / dracon
  Security scanning & static analysis tool
  ☆94Updated 4 months ago
• threatspec / threatspec
  threatspec - continuous threat modeling, through code
  ☆347Updated 4 years ago
• BishopFox / smogcloud
  Find cloud assets that no one wants exposed 🔎 ☁️
  ☆335Updated 4 years ago
• cider-security-research / top-10-cicd-security-risks
  ☆406Updated 2 years ago
• we45 / ThreatPlaybook
  A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestrat…
  ☆278Updated this week
• brompwnie / botb
  A container analysis and exploitation tool for pentesters and engineers.
  ☆663Updated last year
• OWASP / Maturity-Models
  Node application to help managing Maturity Models like the ones created by BSIMM and OpenSAMM
  ☆193Updated 6 years ago
• google / gke-auditor
  ☆74Updated 4 years ago
• BlazingWind / OWASP-ASVS-4.0-testing-guide
  ☆122Updated last year
• paypal / scorebot
  ☆57Updated 4 years ago
• banzaicloud / dast-operator
  Dynamic Application and API Security Testing
  ☆191Updated last year
• DigeeX / raider
  DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider
  ☆138Updated 3 years ago
• xfhg / intercept
  INTERCEPT / Policy as Code Auditing & Compliance
  ☆83Updated last month
• checkmarx-ts / checkmarx-python-sdk
  Checkmarx Python SDK
  ☆28Updated last week
• Morningstar / GoASQ
  General Open Architecture Security Questionnaire
  ☆31Updated last year
• alexivkin / kubepwn
  Kubernetes Pwnage for all
  ☆56Updated 4 years ago
• 4ARMED / kubeletmein
  Security testing tool for Kubernetes, abusing kubelet credentials on public cloud providers.
  ☆162Updated last year
• NetsOSS / headless-burp
  Automate security tests using Burp Suite.
  ☆225Updated 8 months ago
• Mixeway / MixewayHub
  Mixeway is security orchestrator for vulnerability scanners which enable easy plug in integration with CICD pipelines. MixewayHub project…
  ☆109Updated 11 months ago
• devsecops / raindance
  Project intended to make Attack Maps part of software development by reducing the time it takes to complete them.
  ☆48Updated 8 years ago
• OpenCSPM / opencspm
  Open Cloud Security Posture Management Engine
  ☆337Updated 3 years ago
• RhinoSecurityLabs / ccat
  Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.
  ☆615Updated 5 years ago