Contrast-Security-OSS / java-sarifLinks
POJOs generated from the Static Analysis Results Interchange Format (SARIF) JSON schema.
☆27Updated 3 months ago
Alternatives and similar repositories for java-sarif
Users that are interested in java-sarif are comparing it to the libraries listed below
Sorting:
- Automatic repair system for static analysis warnings from SonarQube's SonarJava, TDSC 2022 http://arxiv.org/pdf/2103.12033☆97Updated this week
- Test and monitor your projects for vulnerabilities with Maven. This plugin is officially maintained by Snyk.☆82Updated 2 months ago
- ☕️ Java library for working with SARIF files by Qodana team☆17Updated 3 weeks ago
- a FindBugs/SpotBugs plugin for doing static code analysis for java code bases☆169Updated this week
- Apache Maven Dependency Analyzer☆41Updated last week
- Using JavaParser (https://github.com/JavaParser/JavaParser), browse and navigate the Abstract Syntax Tree (AST) based on the code in your…☆50Updated 3 weeks ago
- A suite of tools for analyzing compiled Java code.☆48Updated last week
- Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects☆356Updated 2 weeks ago
- Analyse package dependency networks at the call graph level☆96Updated 2 years ago
- The SpotBugs Plugin for IntelliJ IDEA☆85Updated 11 months ago
- Apache Maven Artifact Resolver☆145Updated last week
- SonarSource Language Recognizer☆84Updated last month
- A library to read static analysis reports into a Java object model☆89Updated this week
- This repository contains source code of OpenClover Core as well as its integrations: Clover-for-Ant, Clover-for-Eclipse and Clover-for-ID…☆68Updated 2 months ago
- ShiftLeft OverflowDB☆133Updated 8 months ago
- Maven plugin to download and collect license files from project dependencies.☆113Updated last month
- AppMap client agent for Java☆85Updated last week
- CycloneDX SBOM Model and Utils for Creating and Validating BOMs☆103Updated last week
- Maven Mojo Plug-In to generate reports based on the SpotBugs Analyzer☆100Updated this week
- Jarviz is dependency analysis and visualization tool designed for Java applications☆162Updated this week
- Apache Maven Indexer☆69Updated 2 weeks ago
- ☆46Updated this week
- ☆122Updated 9 months ago
- (Deprecated) Compile-time transformer to run Groovy code in a restrictive sandbox☆131Updated last year
- Codyze is a static analyzer for Java, C, C++ based on code property graphs☆91Updated last year
- Maven plugin to handle multi module projects for PiTest☆50Updated 2 years ago
- Experimental JUnit Jupiter Extension for writing integration tests for Maven plugins/Maven extensions/Maven Core☆102Updated last month
- Apache Maven GPG Plugin☆30Updated 3 weeks ago
- Plume is a code representation benchmarking library with options to extract the AST from Java bytecode and store the result in various gr…☆75Updated last year
- Apache Maven Fluido Skin☆18Updated 3 weeks ago