• SAST: Using Github CodeQL Website

• Container Scanning: Trivvy Website

• Web/API Testing: Arachni Website

SAST Steps CodeQL Code

Container Scanning Steps Trivvy Code

Web/API Testing Steps

• start docker-compose up

• start docker run --rm -p 222:22 -p 7331:7331 -p 9292:9292 --name arachni arachni/arachni:latest

• access http://localhost:9292 user: admin@admin.admin pass: administrator

• create new scan with default / XSS / SQL Injection and add backend/frontend address.

• Some Screenshots