SAST

SAST Analyzer for detecting leaked secrets

SAST Analyzer for Phoenix Elixir projects based on sobelow

GitLab Analyzer for Infrastructure as Code (IaC) projects that calls kics. This analyzer is written in Go using the command library shared by all analyzers.

SAST Analyzer for Kubernetes manifests based on kubesec

SAST Analyzer for Salesforce Apex projects based on pmd

Codequality jobs in pipelines https://docs.gitlab.com/ee/user/project/merge_requests/code_quality.html

SAST Analyzer based on Go AST Scanner

SAST Analyzer based on Brakeman

SAST Analyzer for NodeJS projects

Shiftleft CLI auto builder for Docker Hub

Test project with: Language: Php - Package Manager: Composer

Test project with: Language: Python - Package Manager: Pip

SAST Analyzer based on phpcs-security-audit

Test project with: Language: Java - Package Manager: Maven

SAST Analyzer based on Flawfinder

SAST Analyzer for mobile applications

Test project with: Language: Java - Package Manager: Maven - Type: MultiModule

Test project with: Language: Go

Collection of shell scripts packaged with SAST analyzers to enable post-analyzer integrations.