Alternatives and similar repositories for sast-scan:

Users that are interested in sast-scan are comparing it to the libraries listed below

• ShiftLeftSecurity / sast-scan
  Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…
  ☆822Updated last year
• threatspec / threatspec
  threatspec - continuous threat modeling, through code
  ☆343Updated 4 years ago
• we45 / ThreatPlaybook
  A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestrat…
  ☆277Updated last month
• PaperMtn / gitlab-watchman
  Finding exposed secrets and personal data in GitLab
  ☆195Updated 2 months ago
• Autodesk / continuous-threat-modeling
  A Continuous Threat Modeling methodology
  ☆313Updated 2 years ago
• OWASP / Container-Security-Verification-Standard
  Container Security Verification Standard
  ☆57Updated 5 years ago
• OWASP / Maturity-Models
  Node application to help managing Maturity Models like the ones created by BSIMM and OpenSAMM
  ☆190Updated 6 years ago
• OpenCSPM / opencspm
  Open Cloud Security Posture Management Engine
  ☆336Updated 2 years ago
• Mixeway / MixewayHub
  Mixeway is security orchestrator for vulnerability scanners which enable easy plug in integration with CICD pipelines. MixewayHub project…
  ☆108Updated 10 months ago
• owasp-cloud-security / owasp-cloud-security
  OWASP Cloud Security - Enabling conversations through threat and control stories
  ☆178Updated 6 years ago
• chughes757 / SecureSoftwareSupplyChain
  This repo is a consolidation of Secure Software Supply Chain resources, such as talks, whitepapers, conferences and more.
  ☆137Updated 2 years ago
• Yelp / fuzz-lightyear
  A pytest-inspired, DAST framework, capable of identifying vulnerabilities in a distributed, micro-service ecosystem through chaos enginee…
  ☆217Updated 8 months ago
• hysnsec / awesome-sca
  A curated list of Software Component Analysis (SCA) books, courses - free and paid, videos, tools, and tutorials.
  ☆99Updated 2 months ago
• aquasecurity / vuln-list
  NVD, Ubuntu, Alpine
  ☆416Updated this week
• magnologan / awesome-sca
  A comprehensive list of software composition analysis tools.
  ☆136Updated 7 months ago
• devsecops / raindance
  Project intended to make Attack Maps part of software development by reducing the time it takes to complete them.
  ☆47Updated 8 years ago
• BBVA / apicheck
  The DevSecOps toolset for REST APIs
  ☆272Updated 2 years ago
• xfhg / intercept
  INTERCEPT / Policy as Code Auditing & Compliance
  ☆83Updated last week
• mario-platt / ASVS-Agile-Delivery-Guide
  ☆36Updated 3 years ago
• BlazingWind / OWASP-ASVS-4.0-testing-guide
  ☆122Updated last year
• ajinabraham / libsast
  Generic SAST Library
  ☆126Updated 2 months ago
• k8scop / k8s-security-dashboard
  A security monitoring solution for Kubernetes
  ☆131Updated last year
• DSecureMe / vmc
  VMC: a Scalable, Open Source and Free Vulnerability Management Platform
  ☆85Updated last week
• 4ARMED / kubeletmein
  Security testing tool for Kubernetes, abusing kubelet credentials on public cloud providers.
  ☆162Updated last year
• thought-machine / dracon
  Security scanning & static analysis tool
  ☆93Updated 3 months ago
• Morningstar / GoASQ
  General Open Architecture Security Questionnaire
  ☆31Updated last year
• zemmali / DevSecOps-Toolchain
  DevSecOps Toolchain
  ☆110Updated 7 years ago
• banzaicloud / dast-operator
  Dynamic Application and API Security Testing
  ☆190Updated last year
• cr0hn / dockerfile-security
  Static security checker for Dockerfiles
  ☆93Updated 10 months ago
• auth0 / repo-supervisor
  Scan your code for security misconfiguration, search for passwords and secrets.
  ☆639Updated last year