SAST

SAST Analyzer for detecting leaked secrets

SAST Analyzer based on SpotBugs and Find Sec Bugs.

Codequality jobs in pipelines https://docs.gitlab.com/ee/user/project/merge_requests/code_quality.html

Static Application Security Testing (SAST) checks your source code for known vulnerabilities.

Shiftleft CLI auto builder for Docker Hub

Collection of shell scripts packaged with SAST analyzers to enable post-analyzer integrations.

Deprecated SAST Analyzer based on Find Sec Bugs. This analyzer is deprecated in favor of the new Spotbugs analyzer

Deprecated SAST Analyzer for Groovy projects. This analyzer is deprecated in favor of the new Spotbugs analyzer

Static Application Security Testing (SAST) checks your source code for known vulnerabilities.

This repository is part of a master thesis featured on https://scrap.tantemalkah.at and highlights the evaluation of currently maintained F/LOSS static analysis tools for PHP.