Alternatives and similar repositories for sast-scan:

Users that are interested in sast-scan are comparing it to the libraries listed below

• devops-kung-fu / bomber
  Scans Software Bill of Materials (SBOMs) for security vulnerabilities
  ☆536Updated last week
• semgrep / semgrep-rules
  Semgrep rules registry
  ☆830Updated this week
• Threagile / threagile
  Agile Threat Modeling Toolkit
  ☆635Updated 3 weeks ago
• owasp-dep-scan / dep-scan
  OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for …
  ☆1,048Updated last month
• devsecopsmaturitymodel / DevSecOps-MaturityModel
  ☆502Updated this week
• ossf / package-analysis
  Open Source Package Analysis
  ☆805Updated this week
• secureCodeBox / secureCodeBox
  secureCodeBox (SCB) - continuous secure delivery out of the box
  ☆793Updated this week
• threatspec / threatspec
  threatspec - continuous threat modeling, through code
  ☆340Updated 4 years ago
• OWASP / pytm
  A Pythonic framework for threat modeling
  ☆943Updated 3 weeks ago
• rung / threat-matrix-cicd
  Threat matrix for CI/CD Pipeline
  ☆743Updated 6 months ago
• aquasecurity / vuln-list
  NVD, Ubuntu, Alpine
  ☆416Updated this week
• OWASP / samm
  SAMM stands for Software Assurance Maturity Model.
  ☆398Updated 2 years ago
• AppThreat / sast-scan
  Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure D…
  ☆147Updated 4 years ago
• anchore / anchore-engine
  A service that analyzes docker images and scans for vulnerabilities
  ☆1,587Updated last year
• cider-security-research / top-10-cicd-security-risks
  ☆404Updated last year
• Checkmarx / kics
  Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastruct…
  ☆2,140Updated this week
• CycloneDX / cdxgen
  Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package manager…
  ☆610Updated this week
• google / osv.dev
  Open source vulnerability DB and triage service.
  ☆1,583Updated this week
• tcosolutions / betterscan
  Code Scanning/SAST/Static Analysis/Linting using many tools/Scanners with One Report (Code, IaC) - Betterscan
  ☆838Updated this week
• OWASP / threat-dragon
  An open source threat modeling tool from OWASP
  ☆980Updated this week
• trailofbits / it-depends
  A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositorie…
  ☆340Updated last month
• aquasecurity / chain-bench
  An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchm…
  ☆735Updated last month
• threatcl / threatcl
  Documenting your Threat Models with HCL
  ☆412Updated 4 months ago
• Legit-Labs / legitify
  Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets
  ☆789Updated 2 weeks ago
• OWASP-Benchmark / BenchmarkJava
  OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web…
  ☆681Updated this week
• Autodesk / continuous-threat-modeling
  A Continuous Threat Modeling methodology
  ☆313Updated 2 years ago
• OWASP / Docker-Security
  Getting a handle on container security
  ☆638Updated last year
• c0rdis / security-champions-playbook
  Security Champions Playbook v 2.1
  ☆356Updated last year
• OWASP / threat-model-cookbook
  This project is about creating and publishing threat model examples.
  ☆412Updated 3 years ago