Alternatives and similar repositories for privado-core

Users that are interested in privado-core are comparing it to the libraries listed below

• clouditor / cloud-property-graph
  The Cloud Property Graph is based on a Code Property Graph and tries to connect static code analysis and Cloud runtime assessment.
  ☆25Updated 3 months ago
• SAP / risk-explorer-for-software-supply-chains
  A taxonomy of attacks on software supply chains in the form of an attack tree, based on and linked to numerous real-world incidents and o…
  ☆75Updated 2 weeks ago
• plume-oss / plume
  Plume is a code representation benchmarking library with options to extract the AST from Java bytecode and store the result in various gr…
  ☆74Updated 7 months ago
• ossf-cve-benchmark / ossf-cve-benchmark
  The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…
  ☆142Updated last year
• SAP / project-kb
  Home page of project "KB"
  ☆125Updated last month
• joernio / flatgraph
  ☆20Updated this week
• Fraunhofer-AISEC / codyze
  Codyze is a static analyzer for Java, C, C++ based on code property graphs
  ☆87Updated 3 months ago
• AppThreat / chen
  Code Hierarchy Exploration Net (chen)
  ☆20Updated last week
• ShiftLeftSecurity / overflowdb
  ShiftLeft OverflowDB
  ☆121Updated 10 months ago
• s3c2 / vfcfinder
  VFCFinder: Searching for the Missing Vulnerability Fixing Commits
  ☆29Updated last year
• srcclr / efda
  Evaluation Framework for Dependency Analysis (EFDA)
  ☆43Updated 3 years ago
• CROSSINGTUD / CryptoAnalysis
  CogniCrypt_SAST: CrySL-to-Static Analysis Compiler
  ☆72Updated this week
• ShiftLeftSecurity / js2cpg
  ☆18Updated 9 months ago
• secure-software-engineering / COVA
  COVA - A static analysis tool to compute path conditions
  ☆32Updated 2 years ago
• Privado-Inc / privado-cli
  Interface to initiate code scan with Privado to identify data flows and privacy issues
  ☆16Updated last year
• testable-eu / sast-testability-patterns
  Testability Pattern Catalogs for SAST
  ☆30Updated 2 months ago
• microsoft / sarif-vscode-extension
  SARIF Microsoft Visual Studio Code extension
  ☆114Updated last month
• Fraunhofer-AISEC / cpg
  A library to extract Code Property Graphs from C/C++, Java, Go, Python, Ruby and every other language through LLVM-IR.
  ☆325Updated this week
• joernio / joernti-codetidal5
  An integration of JoernTI's CodeTIDAL5 neural type inference model.
  ☆25Updated 3 months ago
• AppThreat / atom
  atom is a novel intermediate representation for applications and a standalone tool that is powered by chen.
  ☆65Updated this week
• ajinabraham / libsast
  Generic SAST Library
  ☆131Updated 6 months ago
• TQRG / secbench
  🪐 A Database of Existing Security Vulnerabilities Patches to Enable Evaluation of Techniques (single-commit; multi-language)
  ☆38Updated last month
• ShiftLeftSecurity / codepropertygraph
  Code Property Graph: specification, query language, and utilities
  ☆508Updated this week
• secure-software-engineering / tamiflex
  TamiFlex facilitates static analysis of programs that use reflection and custom class loaders
  ☆43Updated 4 years ago
• lyvd / bandit4mal
  A fork of Bandit tool with patterns to identifying malicious python code.
  ☆25Updated 2 years ago
• AdaLogics / paper-analyser
  ☆23Updated 3 years ago
• WM-SEMERU / ACER
  ACER is an AST-based Callgraph Generator Development Framework
  ☆33Updated 10 months ago
• fasten-project / fasten
  Analyse package dependency networks at the call graph level
  ☆93Updated last year
• WOOSEUNGHOON / Centris-public
  ☆55Updated last year
• IQTLabs / software-supply-chain-compromises
  A dataset of software supply chain compromises. Please help us maintain it!
  ☆128Updated 2 years ago