Top 13 sast open source projects

nodejsscan is a static security code scanner for Node.js applications.

✭ 1,874

CSS HTML python nodejs security node static-analysis lint security-scanner code-analysis devsecops code-review sast node-security nodejsscan

Terrascan

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

Static Analysis

⚙️ A curated list of static analysis (SAST) tools for all programming languages, config files, build tools, and more.

✭ 9,310

rust Makefile awesome-list static-analysis linter static-code-analysis code-quality analysis static-analyzers sast

Semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

✭ 5,668

javascript python java ocaml Standard ML shell static-analysis static-code-analysis sast r2c semgrep

clj-holmes

A CLI SAST (Static application security testing) tool which was built with the intent of finding vulnerable Clojure code via rules that use a simple pattern language.

✭ 65

clojure security sast

gha-setup-scancentral-client

GitHub Action to set up Fortify ScanCentral Client

✭ 15

typescript javascript shell github setup security static-analysis application-security action appsec fortify sast github-action fortify-ssc fortify-on-demand

mobileAudit

Django application that performs SAST and Malware Analysis for Android APKs

✭ 140

HTML python javascript CSS docker django malware django-rest-framework apk malware-analysis android-security mobile-security virustotal androguard apk-analysis sast code-security defect-dojo mobile-audit

dr checker 4 linux

Port of "DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers" to Clang/LLVM 10 and Linux Kernel

✭ 34

Makefile C++CMake python kernel kernel-module llvm kernel-driver vulnerability-detection vulnerability-scanners sast

intercept

INTERCEPT / Policy as Code Static Analysis Auditing / SAST

✭ 54

go Makefile security auditing scanner static-analysis audit policy compliance policy-evaluation enforcement policy-engine devsecops policy-monitoring sast policy-as-code

horusec-engine

Horusec analysis engine

✭ 18

go Makefile cli security ci cd terraform netcore hacktoberfest sast security-development

DockerENT

The only open-source tool to analyze vulnerabilities and configuration issues with running docker container(s) and docker networks.

✭ 124

python HTML docker hacktoberfest sast hacktoberfest2020 docker-sast runtime-security-testing

CloudDefense.ai is an automated web application security testing tool that audits your web applications by checking for vulnerabilities like SQL Injection, Cross-site scripting and other exploitable vulnerabilities.

✭ 33

shell nodejs hacking xss penetration-testing vulnerability-scanner sast dast

astam-correlator

Vulnerability consolidation and management tool, enhances scan results by merging different findings of the same weakness across multiple static/dynamic scans

✭ 22

java javascript C#CSS ruby PHP security vulnerability pentesting sast dast vulnerability-consolidation

1-13 of 13 sast projects