AppThreat / sast-scan
Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure DevOps, Google CloudBuild, VS Code and Visual Studio. No server required!
☆148Updated 4 years ago
Alternatives and similar repositories for sast-scan:
Users that are interested in sast-scan are comparing it to the libraries listed below
- A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestrat…☆279Updated 3 weeks ago
- Container Security Verification Standard☆58Updated 5 years ago
- ☆123Updated last year
- Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…☆836Updated last year
- Dynamic Application and API Security Testing☆192Updated 2 years ago
- threatspec - continuous threat modeling, through code☆354Updated 4 years ago
- Node application to help managing Maturity Models like the ones created by BSIMM and OpenSAMM☆193Updated 6 years ago
- OWASP Cloud Security - Enabling conversations through threat and control stories☆180Updated 6 years ago
- Finding exposed secrets and personal data in GitLab☆197Updated 5 months ago
- A security monitoring solution for Kubernetes☆132Updated last year
- Project intended to make Attack Maps part of software development by reducing the time it takes to complete them.☆48Updated 8 years ago
- DevSecOps Toolchain☆111Updated 7 years ago
- ☆57Updated 4 years ago
- Scan your code for security misconfiguration, search for passwords and secrets.☆645Updated last year
- A container analysis and exploitation tool for pentesters and engineers.☆665Updated last year
- Checkmarx Scan and Result Orchestration☆94Updated this week
- FestIn - Open S3 Bucket Scanner☆232Updated 4 years ago
- Cloud-related research releases from the Rhino Security Labs team.☆384Updated 4 years ago
- Python API library for DefectDojo☆41Updated 2 years ago
- Container Blackbox Security Auditing Tool: enumerates security configuration from within the target container☆106Updated 6 years ago
- The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.☆171Updated 4 months ago
- Mixeway is security orchestrator for vulnerability scanners which enable easy plug in integration with CICD pipelines. MixewayHub project…☆109Updated last year
- Presentations, training modules, and other education materials from Duo Security's Application Security team.☆73Updated 3 years ago
- A curated list of Software Component Analysis (SCA) books, courses - free and paid, videos, tools, and tutorials.☆103Updated 4 months ago
- Checks whether Docker is deployed according to security best practices as defined in the CIS Docker Benchmark☆216Updated 2 months ago
- A tool for identifying misconfigured CloudFront domains☆351Updated 4 years ago
- Orchestron is an Application Vulnerability Management and Correlation Tool.Orchestron helps you solve one key problem "Find and fix vulne…☆31Updated 2 years ago
- ☆35Updated 3 years ago
- A Continuous Threat Modeling methodology☆318Updated 2 years ago
- An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.☆179Updated this week