Alternatives and similar repositories for zap-sonar-plugin

Users that are interested in zap-sonar-plugin are comparing it to the libraries listed below

• OWASP / sonarqube
  OWASP SonarQube Project
  ☆111Updated 6 years ago
• jenkinsci / dependency-check-plugin
  Jenkins plugin for OWASP Dependency-Check. Inspects project components for known vulnerabilities (e.g. CVEs).
  ☆137Updated this week
• jenkinsci / zap-plugin
  The OWASP ZAP Jenkins Plugin extends the functionality of the ZAP security tool into a CI Environment.
  ☆58Updated last year
• stevespringett / nist-data-mirror
  A simple Java command-line utility to mirror the CVE JSON data from NIST.
  ☆214Updated 3 years ago
• checkmarx-ltd / cx-flow
  Checkmarx Scan and Result Orchestration
  ☆100Updated 3 weeks ago
• OWASP / Container-Security-Verification-Standard
  Container Security Verification Standard
  ☆58Updated 6 years ago
• dependency-check / dependency-check-sonar-plugin
  Integrates Dependency-Check reports into SonarQube
  ☆680Updated 2 months ago
• Soluto / webdriverio-zap-proxy
  Demo - how to easily build security testing for Web App, using Zap and Glue
  ☆61Updated 4 years ago
• RIGS-IT / sonar-xanitizer
  Integrates Xanitizer results into SonarQube
  ☆21Updated 4 years ago
• jeremylong / open-vulnerability-cli
  A cli that can be used to query various online vulnerability sources such as the NVD or GHSA. The CLI and docker images can be used to mi…
  ☆154Updated last week
• fortify-ps / fortify-integration-sonarqube
  Fortify SonarQube Plugin
  ☆22Updated 4 years ago
• codedx / codepulse
  Code Pulse is a real-time code coverage tool for penetration testing activities
  ☆122Updated 3 years ago
• stevespringett / cvss-calculator
  A Java library for calculating CVSSv2, CVSSv3, and CVSSv4 scores and vectors
  ☆50Updated last week
• ICTU / zap2docker-auth-weekly
  Zap baseline scanner in Docker with authentication
  ☆103Updated last year
• Soluto / owasp-zap-glue-ci-images
  Ready to use images of Zap and Glue, especially for CI integration.
  ☆35Updated 6 years ago
• zemmali / DevSecOps-Toolchain
  DevSecOps Toolchain
  ☆112Updated 8 years ago
• iriusrisk / bdd-security
  BDD Automated Security Tests for Web Applications
  ☆568Updated 3 years ago
• blackducksoftware / blackduck-docker-inspector
  ☆21Updated 3 years ago
• soprasteria / sonar-report
  Generates an html report from SonarQube
  ☆103Updated last year
• anchore / anchore-cli
  Simple command-line client to the Anchore Engine service
  ☆113Updated last year
• stevespringett / vulndb-data-mirror
  A simple Java command-line utility to mirror the entire contents of VulnDB.
  ☆48Updated 6 months ago
• Mixeway / MixewayHub
  Mixeway is security orchestrator for vulnerability scanners which enable easy plug in integration with CICD pipelines. MixewayHub project…
  ☆110Updated last year
• Contrast-Security-OSS / safelog4j
  Safelog4j is an instrumentation-based security tool to help teams discover, verify, and solve log4shell vulnerabilities without scanning …
  ☆43Updated 3 months ago
• zapbot / zap-mgmt-scripts
  ZAP Management Scripts
  ☆23Updated 2 weeks ago
• blackducksoftware / detect
  Scanning and analysis for Black Duck SCA products.
  ☆188Updated this week
• jenkinsci / snyk-security-scanner-plugin
  Test and monitor your projects for vulnerabilities with Jenkins. This plugin is officially maintained by Snyk.
  ☆61Updated 2 months ago
• appsecpipeline / AppSecPipeline-Specification
  AppSecPipeline Specification for DevOps automation.
  ☆40Updated 3 years ago
• Grunny / zap-cli
  A simple tool for interacting with OWASP ZAP from the commandline.
  ☆254Updated 2 years ago
• OWASP / Maturity-Models
  Node application to help managing Maturity Models like the ones created by BSIMM and OpenSAMM
  ☆195Updated 7 years ago
• appsecco / DevOpsSecurityChecklist
  ☆14Updated 8 years ago