scodescanner
agrawalsmart7/scodescannerCommand-line static analysis scanner that detects critical vulnerabilities in PHP and YAML source code using custom semgrep rules, with Jira and…
vulnerability-scannersstatic-code-analysiscode-analysis+1
162
agrawalsmart7/scodescannerCommand-line static analysis scanner that detects critical vulnerabilities in PHP and YAML source code using custom semgrep rules, with Jira and…
designsecurity/progpilotPHP static application security testing (SAST) tool that performs taint analysis to detect XSS, SQL injection, and other vulnerabilities using…
shubhamshubhankar/autosourceAutomated static code analysis framework integrated with SonarQube for early vulnerability detection in source code by scanning Git repositories…
squid-protocol1/gitgalaxyAST-free heuristic knowledge graph engine for deep repository intelligence and zero-trust security scanning. Integrates as a GitLab CI/CD component,…
gitlab-org/security-products/sast-rulesCurated Semgrep rule repository for GitLab SAST, providing static analysis patterns to detect security vulnerabilities across multiple programming…
mustafabilgici/sucoshscanny"Sucosh" is an automated Source Code vulnerability scanner and assessment framework for Python(Flask-Django) & NodeJs capable of performing code…
noveogroup/android-checkStatic code analysis plugin for Android project. (Checkstyle, PMD)
facebook/inferA static analyzer for Java, C, C++, and Objective-C
coffeeandsecurity/dakshscraFramework-aware static code analysis tool for automated source code review with platform-specific rules, taint analysis, effort estimation, and…
makenowjust-labs/recheckStatic analysis tool for detecting ReDoS (Regular Expression Denial of Service) vulnerabilities in JavaScript and Scala codebases, providing…
whitesquirrell/c0devari4ntA variant analysis and visualisation tool that scans codebases for similar vulnerabilities
tencent/codeanalysisEnterprise-grade static code analysis platform with multi-language support, security vulnerability detection, code quality metrics, and DevOps…
bridgecrewio/checkovStatic analysis tool for infrastructure as code that detects cloud misconfigurations, vulnerabilities, and secrets across Terraform, Kubernetes,…
ajinabraham/njsscanSemantic-aware SAST scanner for Node.js applications that detects insecure code patterns using libsast pattern matching and semgrep syntax-aware…
checkmarx/kicsStatic analysis scanner for infrastructure-as-code that detects security vulnerabilities, compliance violations, and misconfigurations across…
aftermathlabs/vmp2Unpack and deobfuscate VMProtect 2 protected binaries with an emulation-based VM explorer, handler profiler, and experimental LLVM recompiler for…
mandiant/route-sixty-sinkLink sources to sinks in C# applications.
feeicn/cobraSource Code Security Audit (源代码安全审计)