An open API service providing repository metadata for many open source software ecosystems.

gitlab.com topics: GL-Secure Analyzer

gitlab-org/security-products/analyzers/gosec

SAST Analyzer based on Go AST Scanner

Last synced at: 3 months ago - Stars: 5 - Forks: 19

gitlab-org/security-products/analyzers/semgrep

SAST Analyzer based on Semgrep

Last synced at: 5 months ago - Stars: 34 - Forks: 58

gitlab-org/security-products/analyzers/kics

GitLab Analyzer for Infrastructure as Code (IaC) projects that calls kics. This analyzer is written in Go using the command library shared by all analyzers.

Last synced at: 5 months ago - Stars: 5 - Forks: 12

gitlab-org/security-products/analyzers/common

Go packages to implement analyzers

Last synced at: 5 months ago - Stars: 24 - Forks: 18

gitlab-org/security-products/analyzers/security-code-scan

SAST Analyzer for .NET projects

Last synced at: 6 months ago - Stars: 9 - Forks: 14

gitlab-org/security-products/analyzers/brakeman

SAST Analyzer based on Brakeman

Last synced at: 5 months ago - Stars: 3 - Forks: 7

gitlab-org/security-products/analyzers/phpcs-security-audit

SAST Analyzer based on phpcs-security-audit

Last synced at: 6 months ago - Stars: 8 - Forks: 9

gitlab-org/security-products/analyzers/flawfinder

SAST Analyzer based on Flawfinder

Last synced at: 6 months ago - Stars: 3 - Forks: 8

gitlab-org/security-products/analyzers/nodejs-scan

SAST Analyzer for NodeJS projects

Last synced at: 12 months ago - Stars: 4 - Forks: 15

gitlab-org/security-products/analyzers/bandit

SAST Analyzer based on Bandit

Last synced at: 5 months ago - Stars: 4 - Forks: 7

gitlab-org/security-products/analyzers/find-sec-bugs-gradle 📦

Deprecated SAST Analyzer for Java Gradle projects. This analyzer is deprecated in favor of the new [Spotbugs analyzer](https://gitlab.com/gitlab-org/security-products/analyzers/spotbugs)

Last synced at: 5 months ago - Stars: 0 - Forks: 2

gitlab-org/security-products/analyzers/find-sec-bugs 📦

Deprecated SAST Analyzer based on Find Sec Bugs. This analyzer is deprecated in favor of the new [Spotbugs analyzer](https://gitlab.com/gitlab-org/security-products/analyzers/spotbugs)

Last synced at: 5 months ago - Stars: 1 - Forks: 4

gitlab-org/security-products/analyzers/find-sec-bugs-groovy 📦

Deprecated SAST Analyzer for Groovy projects. This analyzer is deprecated in favor of the new [Spotbugs analyzer](https://gitlab.com/gitlab-org/security-products/analyzers/spotbugs)

Last synced at: 5 months ago - Stars: 0 - Forks: 0

gitlab-org/security-products/analyzers/retire.js 📦

Dependency Scanning Analyzer based on Retire.js

Last synced at: 5 months ago - Stars: 1 - Forks: 10

gitlab-org/security-products/analyzers/find-sec-bugs-sbt 📦

Deprecated SAST Analyzer for Scala sbt projects. This analyzer is deprecated in favor of the new [Spotbugs analyzer](https://gitlab.com/gitlab-org/security-products/analyzers/spotbugs)

Last synced at: 5 months ago - Stars: 0 - Forks: 2

gitlab-org/security-products/analyzers/gemnasium

Dependency Scanning Analyzer based on Gemnasium.

Last synced at: over 1 year ago - Stars: 24 - Forks: 36

gitlab-org/security-products/analyzers/kubesec

SAST Analyzer for Kubernetes manifests based on kubesec

Last synced at: almost 2 years ago - Stars: 4 - Forks: 6

gitlab-org/security-products/analyzers/pmd-apex

SAST Analyzer for Salesforce Apex projects based on pmd

Last synced at: almost 2 years ago - Stars: 0 - Forks: 3

gitlab-org/security-products/analyzers/secrets

SAST Analyzer for detecting leaked secrets

Last synced at: almost 2 years ago - Stars: 12 - Forks: 28

gitlab-org/security-products/analyzers/eslint

SAST Analyzer based on ESLint and its security plugin.

Last synced at: about 2 years ago - Stars: 2 - Forks: 8

gitlab-org/security-products/analyzers/spotbugs

SAST Analyzer based on SpotBugs and Find Sec Bugs.

Last synced at: about 2 years ago - Stars: 6 - Forks: 30

gitlab-org/security-products/analyzers/sobelow

SAST Analyzer for Phoenix Elixir projects based on sobelow

Last synced at: about 2 years ago - Stars: 2 - Forks: 7

gitlab-org/security-products/analyzers/gemnasium-python

Dependency Scanning Analyzer for Python projects based on Gemnasium.

Last synced at: about 2 years ago - Stars: 3 - Forks: 13

gitlab-org/security-products/analyzers/gemnasium-maven

Dependency Scanning Analyzer for Java Maven projects based on Gemnasium.

Last synced at: over 2 years ago - Stars: 4 - Forks: 14

gitlab-org/security-products/post-analyzers/scripts

Collection of shell scripts packaged with SAST analyzers to enable post-analyzer integrations.

Last synced at: over 2 years ago - Stars: 0 - Forks: 0

gitlab-org/security-products/analyzers/bundler-audit

Dependency Scanning Analyzer based on bundler-audit.

Last synced at: over 2 years ago - Stars: 1 - Forks: 7