A python script to conduct static analysis of shell scripts that can be used as a standalone script or integrated into a build pipeline.

This is a Python 2.7 script that can be used to launch massive 'appscan prepare' commands.

Detect vulnerability in Grails projects with this SAST scanner!

DASCA combines dynamic and static techniques for analysing code for finding security (i.e., vulnerabilities), safety, or reliability problems.

Cascade - Dataflow graphing and analysis for C#

docker image for PMD SAST

GitHub action for performing SAST scanning using various oss tools such as gitleaks, bandit, findsecbugs etc

A framework to learn and assess source code

SAST Scanner Modified - Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure DevOps, Google CloudBuild, VS Code and Visual Studio. No server required!

Parsing PHP source code using Python and generating ASTs

Automating various Git SAST Scanner tools like trufflehog, gitleaks ,etc

Proof of concept of Veracode custom cleanser annotations in sample Java application

Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure DevOps, Google CloudBuild, VS Code and Visual Studio. No server required!

maven pipeline

open clover sandbox

Benchmark collection for analysis. The idea is to have a collection of projects in several languages as well as various sast applications to do scans and comparisons. At the end of the day the intention is to reduce the number of false positives in benchmarks projects.

Static Application Security Testing (SAST) using Sonarqube workshop

AWS native Static Application Security Testing (SAST) utility to find and eradicate vulnerable software packages stored in AWS CodeArtifact. Built for both real-time distributed and centralized deployments.

A script to automate SAST analysis of your decompiled APKs with Checkmarx, and a Dockerfile if you ever need it.

SAST_DAST_examples for Fortify and Webinspect