feeicn/cobraSource Code Security Audit (源代码安全审计)
This project's design can no longer meet current white-box scanning requirements. It is no longer maintained and is intended for research use only. Please do not use it in a production environment.
Cobra is a source code security audit tool that supports detecting most prominent security issues and vulnerabilities in source code of multiple development languages.
Supports development languages such as PHP and Java, and supports dozens of file types.
The first batch opens tens of thousands of insecure dependency check rules and dozens of code security scanning rules, and more scanning rules will continue to be opened in the future.
Provides a local Web Server service, which can be operated visually via GUI, and also supports local API interfaces, making it convenient for integration and extension with other systems (release systems, CI, etc.).
The project was initiated and led by Feei, with core developers LiGhT1EsS, BlBana, 40huo, and braveghz. Thanks also to other contributors. PRs are welcome.
