tcosolutions / betterscan
Code Scanning/SAST/Static Analysis/Linting using many tools/Scanners with One Report (Code, IaC) - Betterscan
☆858Updated last month
Alternatives and similar repositories for betterscan:
Users that are interested in betterscan are comparing it to the libraries listed below
- Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…☆839Updated last year
- Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.☆903Updated this week
- OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for …☆1,105Updated this week
- Scans Software Bill of Materials (SBOMs) for security vulnerabilities☆564Updated last month
- Practical resources for offensive CI/CD security research. Curated the best resources I've seen since 2021.☆517Updated 2 months ago
- Attack surface detector that identifies endpoints by static analysis☆696Updated this week
- 💀 Don't fear the Reaper 👻☆506Updated this week
- Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.☆1,132Updated last year
- secureCodeBox (SCB) - continuous secure delivery out of the box☆886Updated this week
- Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets☆801Updated last month
- Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilit…☆536Updated 3 years ago
- Agile Threat Modeling Toolkit☆664Updated last week
- GitHub Actions Pipeline Enumeration and Attack Tool☆634Updated 3 weeks ago
- ☆409Updated 2 years ago
- A comprehensive list of software composition analysis tools.☆144Updated 11 months ago
- Proof of concept code for Datadog Security Labs referenced exploits.☆436Updated last month
- Vulnerable REST API with OWASP top 10 vulnerabilities for security testing☆983Updated 5 months ago
- Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package manager…☆689Updated this week
- A collection of real-world threat model examples across various technologies, providing practical insights into identifying and mitigatin…☆429Updated 2 months ago
- A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Sec…☆290Updated last year
- Tool for building Kubernetes attack paths☆857Updated this week
- Global Security Database☆318Updated last year
- An open source threat modeling tool from OWASP☆1,088Updated this week
- A compilation of resources in the software supply chain security domain, with emphasis on open source☆316Updated 2 years ago
- OXO is a security scanning orchestrator for the modern age.☆550Updated this week
- Tool to check for dependency confusion vulnerabilities in multiple package management systems☆718Updated 8 months ago
- Open Source Package Analysis☆833Updated 3 weeks ago
- Security Auditor Utility for GraphQL APIs☆454Updated 2 months ago
- Gram is Klarna's own threat model diagramming tool☆320Updated last week
- CI/CD Security Analyzer☆658Updated 2 months ago