static analysis

A static analysis tool to draw an application map, which is similar to a context map although more accurate and detailed.

Code checker script provides the way to check the quality of the Interitty codes.

Examples for GitLab CI/CD integration with Parasoft C/C++test

Examples for GitLab CI/CD integration with Parasoft dotTEST

Examples for GitLab CI/CD integration with Parasoft Jtest

Veracode Pipeline Scan Component This Veracode Pipeline Scan component runs the Veracode pipeline-scan as an action on any GitHub pipeline

The only pre-requisites is to have the application compiled/packaged according the Veracode Packaging Instructions here

About The pipeline-scan component is designed to be used in a CI/CD pipeline to submit a binary or source code zip to Veracode for security scanning.

For more information on Pipeline Scan, visit the Veracode Docs.

Veracode upload and scan component. This component will run a Veracode static scan as Sandbox scan or as policy scan.

Static Application Security Testing (SAST) checks your source code for known vulnerabilities.

Use Code Quality to analyze your source code’s quality and complexity. This helps keep your project’s code simple, readable, and easier to maintain.

Gratis, libre and open source server providing code assistance for PHP. https://serenata.gitlab.io/

Secret Detection scans your repository to help prevent your secrets from being exposed.

Performs interprocedural and intraprocedural PointsTo analysis on static Java methods using a bounded call string approach.

Repository around the Dynamic Analysis and privacy breakdowns of popular applications.

tiny utility program for type-analysis of shell pipelines based on ladder-typing

Repository to demonstrate sample issues in Python raised by DeepSource.

https://deepsource.io/gl/deepsourcelabs/demo-python/issues/

Repository to demonstrate sample issues in Go raised by DeepSource.

Results: https://deepsource.io/gl/deepsourcelabs/demo-go/issues/

Jesse is a program analysis tool which returns for a given binary (program or library) all system calls it can invoke.

This repository is part of a master thesis featured on https://scrap.tantemalkah.at and highlights the evaluation of currently maintained F/LOSS static analysis tools for PHP.