User-friendly documentation for the SARIF file format.
☆361Dec 15, 2023Updated 2 years ago
Alternatives and similar repositories for sarif-tutorials
Users that are interested in sarif-tutorials are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- .NET code and supporting files for working with the 'Static Analysis Results Interchange Format' (SARIF, see https://github.com/oasis-tcs…☆224Updated this week
- OASIS SARIF TC: Repository for development of the draft standard, where requests for modification should be made via Github Issues☆211Jul 19, 2026Updated last month
- SARIF Microsoft Visual Studio Code extension☆139Feb 14, 2026Updated 6 months ago
- A group of Rust projects for interacting with the SARIF format☆135Updated this week
- GitHub Action for filtering Code Scanning alerts by path and id☆35Jul 22, 2026Updated last month
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- SARIF Microsoft Visual Studio Viewer Extension☆49Apr 20, 2024Updated 2 years ago
- GitHub Advanced Security Python Toolkit☆14Aug 3, 2026Updated 3 weeks ago
- A React-based component for viewing SARIF files.☆108Nov 12, 2024Updated last year
- Static Analysis Results Interchange Format (SARIF) For OCaml☆14Apr 22, 2026Updated 4 months ago
- CodeQL model generation for Go.☆17Jun 11, 2021Updated 5 years ago
- This repository hosts the download links for LGTM Enterprise.☆19Apr 8, 2022Updated 4 years ago
- Action to detect if a secret is initially detected in a PR commit☆10Jun 19, 2023Updated 3 years ago
- ☆31Jul 27, 2026Updated last month
- Tool for algorithmic complexity analysis based on symbolic execution☆10Sep 17, 2018Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Effective ReDoS Detection by Principled Vulnerability Modeling and Exploit Generation☆15Jul 24, 2025Updated last year
- ☆80Aug 17, 2026Updated last week
- A tool that aims to bulk automates the enablement of GitHub Code Scanning, Secret Scanning and Dependabot across multiple repositories.☆157Jun 17, 2024Updated 2 years ago
- An Action to wrap creating an SBOM via REST API☆20Updated this week
- Things that would cause a git leaks scan to freak out☆28Aug 21, 2026Updated last week
- OWASP Benchmark Project Utilities - Provides scorecard generation and crawling tools for Benchmark style test suites.☆25Updated this week
- CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security☆10,023Updated this week
- Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…☆879Sep 1, 2023Updated 2 years ago
- The official repo of Doop, the declarative pointer analysis framework.☆222Aug 1, 2026Updated 3 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- vexctl is a tool to attest VEX impact statements☆45Mar 27, 2023Updated 3 years ago
- Synchronize GitHub Code Scanning alerts to Jira issues☆100Updated this week
- Optimize the utilization of GHAS licenses in an enterprise (or organization)☆15Feb 12, 2026Updated 6 months ago
- Enable Falco to read audit logs from EKS☆11Dec 13, 2020Updated 5 years ago
- Go beyond package manager discovery for SBOM☆18Feb 22, 2022Updated 4 years ago
- This bootcamp is designed to familiarize you with GitHub Advanced Security (GHAS) so that you can better understand how to use it in your…☆69Jul 22, 2024Updated 2 years ago
- A collection of various scripts and automations to simplify Checkmarx SAST and IAST setup and use☆14Aug 30, 2018Updated 8 years ago
- Caulking installs global Git hooks that run gitleaks so you don’t accidentally commit or push secrets.☆35May 28, 2026Updated 3 months ago
- Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.☆1,237Jul 31, 2026Updated 3 weeks ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.☆16,434Updated this week
- DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.☆1,004Updated this week
- Prepackaged and precompiled github codeql container for rapid analysis, deployment and development.☆126Nov 27, 2023Updated 2 years ago
- Code Property Graph: specification, query language, and utilities☆594Jul 22, 2026Updated last month
- Codyze is a static analyzer for Java, C, C++ based on code property graphs☆90Aug 4, 2026Updated 3 weeks ago
- A GitHub Action that helps remove GHAS Licences☆12Jul 15, 2024Updated 2 years ago
- h2-jdbc(https://github.com/h2database/h2database/issues/3195) & mysql-jdbc(CVE-2021-2471) SQLXML XXE vulnerability reproduction.☆54Dec 12, 2021Updated 4 years ago