OWASP / sonarqube
OWASP SonarQube Project
☆110Updated 5 years ago
Related projects ⓘ
Alternatives and complementary repositories for sonarqube
- The OWASP ZAP Jenkins Plugin extends the functionality of the ZAP security tool into a CI Environment.☆58Updated last month
- Integrates OWASP Zed Attack Proxy reports into SonarQube☆69Updated last year
- Code Pulse is a real-time code coverage tool for penetration testing activities☆115Updated last year
- Mobile Security testing Framework☆40Updated 6 years ago
- OWASP Security Logging library for Java☆115Updated 11 months ago
- Node application to help managing Maturity Models like the ones created by BSIMM and OpenSAMM☆187Updated 6 years ago
- An application to catch, search and analyze HTTP secure headers.☆63Updated 3 years ago
- Jenkins plugin for OWASP Dependency-Check. Inspects project components for known vulnerabilities (e.g. CVEs).☆129Updated last week
- OWASP Testing Guide☆110Updated 8 years ago
- Container Security Verification Standard☆57Updated 5 years ago
- The help files for the ZAP core☆200Updated this week
- SonarQube plugin for identifying hardcoded secrets, such as passwords, API keys, AWS credentials, etc..☆100Updated 11 months ago
- A Java library for parsing and programmatically using threat models☆79Updated last year
- A simple Java command-line utility to mirror the entire contents of VulnDB.☆44Updated this week
- ThreadFix is a software vulnerability management platform. This GitHub site is far out of date. Please go to www.threadfix.it for up-to-d…☆340Updated last year
- This plugin adds an ability to perform automatic code scan by Checkmarx server and shows results summary and trend in Jenkins interface.☆42Updated 3 weeks ago
- ☆20Updated 6 years ago
- ☆17Updated last month
- Open Security Summit 2019☆25Updated 3 years ago
- Owasp Orizon is a source code static analyzer tool designed to spot security issues in Java applications.☆144Updated 7 years ago
- Content for OWASP Summit 2017 site☆128Updated 3 years ago
- Microsoft Threat Modeling Template files☆180Updated last year
- Software Component Verification Standard (SCVS)☆134Updated 6 months ago
- Content for 'JIRA Risk Project' book published at LeanPub☆56Updated 6 years ago
- OWASP Cloud Security - Enabling conversations through threat and control stories☆177Updated 5 years ago
- OWASP SecurityRAT (version 1.x) - Tool for handling security requirements in development☆173Updated 3 months ago
- Integrates Xanitizer results into SonarQube☆21Updated 3 years ago
- A simple Java command-line utility to mirror the CVE JSON data from NIST.☆206Updated 2 years ago
- A toolkit for building self-defending applications through real-time event detection and response☆278Updated last year
- Custom security ruleset for the popular Java static analysis tool PMD.☆61Updated 8 years ago