Alternatives and similar repositories for fortify-integration-sonarqube:

Users that are interested in fortify-integration-sonarqube are comparing it to the libraries listed below

• SonarQubeCommunity / sonar-fortify
  Fortify SCA Plugin for SonarQube
  ☆14Updated 3 years ago
• jenkinsci / zap-plugin
  The OWASP ZAP Jenkins Plugin extends the functionality of the ZAP security tool into a CI Environment.
  ☆60Updated 6 months ago
• we45 / RoboZap
  ☆32Updated last year
• ing-bank / bdd-mobile-security-automation-framework
  Mobile Security testing Framework
  ☆41Updated 6 years ago
• srcclr / efda
  Evaluation Framework for Dependency Analysis (EFDA)
  ☆43Updated 2 years ago
• OtherDevOpsGene / zap-sonar-plugin
  Integrates OWASP Zed Attack Proxy reports into SonarQube
  ☆70Updated last year
• checkmarx-ltd / cx-flow
  Checkmarx Scan and Result Orchestration
  ☆94Updated last week
• Morningstar / GoASQ
  General Open Architecture Security Questionnaire
  ☆32Updated last year
• OWASP / Cloud-Native-Application-Security-Top-10
  ☆20Updated 6 years ago
• victims / maven-security-versions
  Identify vulnerable libraries in Maven dependencies
  ☆46Updated 2 years ago
• cxai / Checkmarx-PowerTools
  A collection of various scripts and automations to simplify Checkmarx SAST and IAST setup and use
  ☆14Updated 6 years ago
• eBay / DASTProxy
  ☆58Updated 3 months ago
• appsecpipeline / AppSecPipeline-Specification
  AppSecPipeline Specification for DevOps automation.
  ☆40Updated 2 years ago
• OWASP / Maturity-Models
  Node application to help managing Maturity Models like the ones created by BSIMM and OpenSAMM
  ☆193Updated 6 years ago
• NetsOSS / headless-burp
  Automate security tests using Burp Suite.
  ☆226Updated 10 months ago
• Contrast-Security-OSS / safelog4j
  Safelog4j is an instrumentation-based security tool to help teams discover, verify, and solve log4shell vulnerabilities without scanning …
  ☆41Updated 10 months ago
• hakbot / hakbot-origin-controller
  Vendor-Neutral Security Tool Automation Controller (over REST)
  ☆28Updated 5 years ago
• codedx / codepulse
  Code Pulse is a real-time code coverage tool for penetration testing activities
  ☆122Updated 2 years ago
• Contrast-Security-OSS / vulnerable-spring-boot-application
  ☆14Updated last year
• we45 / orchestron-community
  Orchestron is an Application Vulnerability Management and Correlation Tool.Orchestron helps you solve one key problem "Find and fix vulne…
  ☆31Updated 2 years ago
• ICTU / zap2docker-auth-weekly
  Zap baseline scanner in Docker with authentication
  ☆103Updated 11 months ago
• Soluto / owasp-zap-glue-ci-images
  Ready to use images of Zap and Glue, especially for CI integration.
  ☆34Updated 6 years ago
• rusakovichma / TicTaaC
  Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. …
  ☆62Updated 9 months ago
• checkmarx-ts / CxAnalytix
  Exports vulnerability scan data from the Checkmarx SAST platform for use in analytical tools.
  ☆19Updated 5 months ago
• OWASP / sonarqube
  OWASP SonarQube Project
  ☆111Updated 5 years ago
• appsecco / DevOpsSecurityChecklist
  ☆14Updated 7 years ago
• jenkinsci / contrast-continuous-application-security-plugin
  Jenkins Plugin from Contrast Security
  ☆13Updated 8 months ago
• Contrast-Security-OSS / sheepdog
  ☆17Updated 6 months ago
• security-dockerfiles / burp
  BurpSuite dockerized
  ☆11Updated 7 years ago
• thesp0nge / owasp-orizon
  Owasp Orizon is a source code static analyzer tool designed to spot security issues in Java applications.
  ☆144Updated 8 years ago