G

GL-Secure Analyzer

SAST Analyzer for detecting leaked secrets

Dependency Scanning Analyzer based on Gemnasium.

GitLab Analyzer for Infrastructure as Code (IaC) projects that calls kics. This analyzer is written in Go using the command library shared by all analyzers.

SAST Analyzer for Kubernetes manifests based on kubesec

SAST Analyzer for Salesforce Apex projects based on pmd

SAST Analyzer for Phoenix Elixir projects based on sobelow

SAST Analyzer based on Go AST Scanner

SAST Analyzer based on Brakeman

SAST Analyzer for NodeJS projects

SAST Analyzer based on phpcs-security-audit

SAST Analyzer based on Flawfinder

Collection of shell scripts packaged with SAST analyzers to enable post-analyzer integrations.

SAST Analyzer based on Bandit

Dependency Scanning Analyzer based on Gemnasium.

SAST Analyzer based on tslint and its security plugin

archived in favor of eslint. gitlab-org/gitlab#229396

Deprecated. Container Scanning Analyzer for docker images based on clair and klar

SAST Analyzer based on ESLint and its security plugin.

Deprecated SAST Analyzer for Java Gradle projects. This analyzer is deprecated in favor of the new Spotbugs analyzer

Deprecated SAST Analyzer based on Find Sec Bugs. This analyzer is deprecated in favor of the new Spotbugs analyzer

Deprecated SAST Analyzer for Groovy projects. This analyzer is deprecated in favor of the new Spotbugs analyzer