SAST

A project containing leaked secrets and tokens.

Veracode SAST Packaging Component This component will run the Veracode CLI package command to prepare the repository for static code analysis. Generated artifacts will be stored behind the name veracode-artifacts.

Veracode upload and scan component. This component will run a Veracode static scan as Sandbox scan or as policy scan.

Static Application Security Testing (SAST) checks your source code for known vulnerabilities.

SAST Analyzer based on Brakeman

SAST Analyzer for NodeJS projects

Shiftleft CLI auto builder for Docker Hub

Test project with: Language: Php - Package Manager: Composer

Test project with: Language: Python - Package Manager: Pip

Test project with: Language: Java - Platform: Android

Test project with: Language: Scala - Package Manager: Sbt

SAST Analyzer based on phpcs-security-audit

Test project with: Language: Java - Package Manager: Maven

Test project for Java Gradle

SAST Analyzer based on Flawfinder

SAST Analyzer for mobile applications

Test project with: Language: Apex - Package Manager: SFDX

Test project with: Language: Go - Package Manager: Go mod