ligurio / semgrep-rulesLinks
semgrep rules for flakiness, missed error handling, Lua antipatterns and pitfalls.
☆16Updated 10 months ago
Alternatives and similar repositories for semgrep-rules
Users that are interested in semgrep-rules are comparing it to the libraries listed below
Sorting:
- Automatic fuzz targets generation for Golang packages☆53Updated last month
- 🚰 Static taint analysis for Go programs.☆73Updated 3 weeks ago
- This is a go-protobuf-mutator library for random value mutations. This is a Go equivalent of libprotobuf-mutator, which is implemented in…☆35Updated last week
- Go library for SARIF - Static Analysis Results Interchange Format☆80Updated 3 weeks ago
- Docker Secure Computing Profile Generator☆48Updated 3 years ago
- CLI to integrate continuous fuzzing with Fuzzit (no longer available)☆222Updated 5 years ago
- eBPF based syscalls, files and network events tracing framework☆93Updated 5 years ago
- Build custom Docker seccomp profiles for containers by finding syscalls it uses.☆90Updated 5 years ago
- A project to run fuzzing jobs at scale with Kubernetes.☆148Updated 4 years ago
- Low-effort reachability analysis for third-party code vulnerabilities.☆21Updated 2 years ago
- Corpus for github.com/dvyukov/go-fuzz examples☆202Updated 4 years ago
- Fuzzing Go crypto☆74Updated 6 years ago
- Detect compiler names and versions from ELF files☆27Updated 4 months ago
- Creates CycloneDX Software Bill-of-Materials (SBOM) from Go projects. So you can use it with DependencyTrack to monitor security issues i…☆22Updated 5 years ago
- egrets monitors egress☆46Updated 5 years ago
- A tool for interacting with live processes/containers☆22Updated 3 years ago
- ☆22Updated 3 years ago
- A taxonomy of attacks on software supply chains in the form of an attack tree, based on and linked to numerous real-world incidents and o…☆78Updated this week
- Static code analysis tool to find unsafe usages in Go packages and their dependencies☆44Updated 5 years ago
- A place to systematically store software bill of materials (SBOM) documents.☆46Updated 2 years ago
- Parallel Delta Debugging Framework☆53Updated 2 weeks ago
- ☆29Updated 7 months ago
- The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…☆151Updated last year
- ☆26Updated 9 years ago
- go-ima is a tool that checks if a file has been tampered with. It is useful in ensuring integrity in CI systems☆13Updated last year
- OWASP Dependency Track API client for intergration into CI/CD pipeline☆55Updated last year
- ☆20Updated 2 years ago
- Generative and mutative fuzzer for Kubernetes admission controller chains by automatically parsing the cluster api specification.☆74Updated 2 years ago
- Function callpath mapping analysis tool for Go☆34Updated 6 months ago
- Feed parsing for language package manager updates☆78Updated 9 months ago