User-friendly documentation for the SARIF file format.
☆367Dec 15, 2023Updated 2 years ago
Alternatives and similar repositories for sarif-tutorials
Users that are interested in sarif-tutorials are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- .NET code and supporting files for working with the 'Static Analysis Results Interchange Format' (SARIF, see https://github.com/oasis-tcs…☆227Oct 3, 2026Updated last week
- OASIS SARIF TC: Repository for development of the draft standard, where requests for modification should be made via Github Issues☆212Sep 19, 2026Updated 3 weeks ago
- SARIF Microsoft Visual Studio Code extension☆140Oct 3, 2026Updated last week
- A report formatter for Bandit (a Python security analyzer) that produces output in the SARIF format.☆21Sep 19, 2023Updated 3 years ago
- Python classes for the SARIF object model☆50Apr 3, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A group of Rust projects for interacting with the SARIF format☆137Sep 28, 2026Updated last week
- GitHub Action for filtering Code Scanning alerts by path and id☆35Jul 22, 2026Updated 2 months ago
- SARIF Microsoft Visual Studio Viewer Extension☆49Sep 29, 2026Updated last week
- A set of Python command line tools for working with SARIF files produced by code analysis tools☆158Apr 21, 2026Updated 5 months ago
- A React-based component for viewing SARIF files.☆108Sep 9, 2026Updated last month
- This repository hosts the download links for LGTM Enterprise.☆19Apr 8, 2022Updated 4 years ago
- Action to detect if a secret is initially detected in a PR commit☆10Jun 19, 2023Updated 3 years ago
- Tool for algorithmic complexity analysis based on symbolic execution☆10Sep 17, 2018Updated 8 years ago
- A static analyzer powered by AI☆26Aug 5, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆80Oct 1, 2026Updated last week
- A tool that aims to bulk automates the enablement of GitHub Code Scanning, Secret Scanning and Dependabot across multiple repositories.☆157Jun 17, 2024Updated 2 years ago
- code reviews to practice☆18Jul 22, 2021Updated 5 years ago
- An Action to wrap creating an SBOM via REST API☆21Oct 3, 2026Updated last week
- Things that would cause a git leaks scan to freak out☆30Sep 29, 2026Updated last week
- OWASP Benchmark Project Utilities - Provides scorecard generation and crawling tools for Benchmark style test suites.☆25Updated this week
- CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security☆10,185Updated this week
- Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…☆882Sep 1, 2023Updated 3 years ago
- The official repo of Doop, the declarative pointer analysis framework.☆225Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- vexctl is a tool to attest VEX impact statements☆45Mar 27, 2023Updated 3 years ago
- GitHub Action to generate GitHub Advanced Security (GHAS) metrics report☆17Feb 1, 2025Updated last year
- Synchronize GitHub Code Scanning alerts to Jira issues☆102Sep 28, 2026Updated last week
- ☆32May 1, 2025Updated last year
- Optimize the utilization of GHAS licenses in an enterprise (or organization)☆15Feb 12, 2026Updated 7 months ago
- Enable Falco to read audit logs from EKS☆11Dec 13, 2020Updated 5 years ago
- This bootcamp is designed to familiarize you with GitHub Advanced Security (GHAS) so that you can better understand how to use it in your…☆69Jul 22, 2024Updated 2 years ago
- Caulking installs global Git hooks that run gitleaks so you don’t accidentally commit or push secrets.☆35Sep 30, 2026Updated last week
- Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.☆16,954Updated this week
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Prepackaged and precompiled github codeql container for rapid analysis, deployment and development.☆127Nov 27, 2023Updated 2 years ago
- DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.☆1,010Oct 2, 2026Updated last week
- Codyze is a static analyzer for Java, C, C++ based on code property graphs☆90Aug 4, 2026Updated 2 months ago
- Code Property Graph: specification, query language, and utilities☆606Sep 28, 2026Updated last week
- A GitHub Action that helps remove GHAS Licences☆12Jul 15, 2024Updated 2 years ago
- GitHub Advanced Security Policy as Code☆105Updated this week
- COVA - A static analysis tool to compute path conditions☆41Mar 2, 2026Updated 7 months ago