Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure DevOps, Google CloudBuild, VS Code and Visual Studio. No server required!
☆149Sep 4, 2020Updated 6 years ago
Alternatives and similar repositories for sast-scan
Users that are interested in sast-scan are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…☆883Sep 1, 2023Updated 3 years ago
- ☆15Jun 22, 2026Updated 4 months ago
- Jess is short for Joern extended by Semantic Slicing. This tool allows you to import C code into a Code Property Graph, and then compute …☆17May 22, 2024Updated 2 years ago
- 安卓activity劫持演示demo，包含指定activity位于前台时的劫持和指定进程位于前台时的劫持☆15Dec 20, 2018Updated 7 years ago
- Static code auditing system☆467Jan 8, 2021Updated 5 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Scripting Assembly Language☆12Sep 2, 2015Updated 11 years ago
- ☆15Jul 11, 2018Updated 8 years ago
- OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for …☆1,324Updated this week
- A collection of various scripts and automations to simplify Checkmarx SAST and IAST setup and use☆14Aug 30, 2018Updated 8 years ago
- Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilit…☆553Apr 10, 2022Updated 4 years ago
- A deliberately vulnerable Android application to demonstrate exfiltration scenarios☆13May 20, 2020Updated 6 years ago
- Mitigations (AWS WAF, Lambda@Edge/CloudFront Functions) to implement on AWS to attempt to prevent log4j exploitation.☆22Dec 19, 2021Updated 4 years ago
- This is a collection of ZAProxy Automation Tools and scripts to automate security tests of WEB Applications and WEB Sites☆26May 14, 2023Updated 3 years ago
- A Burp Suite extension that starts scanning on requests it sees, and dumps results on standard output☆21Aug 11, 2016Updated 10 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- ☆19Feb 1, 2016Updated 10 years ago
- A Java library for parsing and programmatically using threat models☆82Feb 15, 2023Updated 3 years ago
- Codyze is a static analyzer for Java, C, C++ based on code property graphs☆90Aug 4, 2026Updated 2 months ago
- ☆12Feb 17, 2016Updated 10 years ago
- Growing repository of Infrastructure as Code demos (initially created for DevOps Wall Street)☆34Oct 31, 2023Updated 2 years ago
- ☆32May 22, 2023Updated 3 years ago
- Terraform module which provides easy to configure AWS environment for running automated security scanning solutions at scheduled interval…☆47Jan 29, 2019Updated 7 years ago
- Threat hunting repo for my independent study on threat hunting with OSQuery☆27Jan 16, 2018Updated 8 years ago
- A collection of useful standalone tools that solve real problems for developers and security professionals.☆14Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- AI Human-in-the-Loop and Workflow Starter with Next.js, Supabase, and Mastra☆13Jul 10, 2025Updated last year
- The CodeQL extractor and libraries for Go.☆471Jan 5, 2023Updated 3 years ago
- Docker + CVE-2015-2925 = escaping from --volume☆11Jun 30, 2015Updated 11 years ago
- ☆10May 12, 2017Updated 9 years ago
- A companion repo to accompany detailed guides and YouTube content to allow users to follow along☆13Aug 29, 2020Updated 6 years ago
- njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.☆458Sep 21, 2026Updated last month
- Pin designs for security related items☆37Feb 16, 2026Updated 8 months ago
- Golang library to interact with ST VL53L0X time-of-flight ranging sensor via I2C-bus from Raspberry PI.☆12Dec 22, 2018Updated 7 years ago
- For Implementing CIS Controls in Different Operating Systems☆14Aug 2, 2019Updated 7 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- this is a demo set of attacks that can be used to get started with gauntlt☆10Mar 16, 2015Updated 11 years ago
- github action to run the bandit security linter☆16Feb 26, 2026Updated 8 months ago
- Testability Pattern Catalogs for SAST☆37Feb 18, 2025Updated last year
- AWS Serverless Security☆400Jul 13, 2022Updated 4 years ago
- Container security resources☆10Nov 14, 2020Updated 5 years ago
- Ready to use images of Zap and Glue, especially for CI integration.☆35Mar 12, 2019Updated 7 years ago
- Plume is a code representation benchmarking library with options to extract the AST from Java bytecode and store the result in various gr…☆79Oct 14, 2024Updated 2 years ago