SAST

GitLab's semgrep container image augmented with hundreds of additional Node.js/JavaScript/Typescript and Go rules from Semgrep's rule repository.

Rule Repository for GitLab SAST

A post-processor for computing the scope+offset fingerprint.

SAST Analyzer based on Semgrep

A project containing "vulnerable" code for testing GitLab SAST functionality.

Veracode Pipeline Scan Component This Veracode Pipeline Scan component runs the Veracode pipeline-scan as an action on any GitHub pipeline

The only pre-requisites is to have the application compiled/packaged according the Veracode Packaging Instructions here

About The pipeline-scan component is designed to be used in a CI/CD pipeline to submit a binary or source code zip to Veracode for security scanning.

For more information on Pipeline Scan, visit the Veracode Docs.

SAST Analyzer based on Brakeman

SAST Analyzer for NodeJS projects

Test project with: Language: Elixir - Package Manager: Mix - Framework: Phoenix

A project containing clientside javascript (*.js & *.html)

Test project with: Language: Ruby - Package Manager: Bundler - Framework : Rails

SAST Analyzer based on ESLint and its security plugin.

The diplom project of the Yandex practicum

AI DevSecOps Serverless Scanners.

An example project staged to demonstrate the usage of Veracode's SAST scanning tools within CI/CD pipeline.