DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.
Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them
Bearer is a static analysis security testing tool and privacy compliance auditor. It identifies security vulnerabilities, hard-coded secrets, and privacy risks in source code through static analysis and data flow tracing. The tool distinguishes itself by tracking the movement of sensitive data through code to identify leaks and by mapping personal and health-related information flows to generate evidence for privacy impact assessments. It also provides differential scanning for pull requests and uses fingerprint-based suppression to exclude known false positives from reports. The platform co
gosec is a static analysis security tool designed to scan Go source code for vulnerabilities and common coding flaws. It functions as a security analyzer that inspects the abstract syntax tree to identify insecure function calls, API usage, and potential security risks. The tool distinguishes itself by mapping detected vulnerabilities to Common Weakness Enumeration identifiers for standardized reporting and integrating with external AI models to suggest code fixes for identified issues. Its capabilities cover the detection of injection vulnerabilities, hardcoded credentials, weak cryptograph
Lint an npm or yarn lockfile to analyze and detect security issues
Die Hauptfunktionen von lirantal/lockfile-lint sind: Dependency Analysis, Dependency Utilities, Static Code Analysis, Security and Vulnerability Scanning.
Open-Source-Alternativen zu lirantal/lockfile-lint sind unter anderem: pypa/pip-audit — Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can… microsoft/devskim — DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities. bearer/bearer — Bearer is a static analysis security testing tool and privacy compliance auditor. It identifies security… securego/gosec — gosec is a static analysis security tool designed to scan Go source code for vulnerabilities and common coding flaws.… future-architect/vuls — Vuls is an agentless vulnerability scanner and CVE intelligence aggregator. It identifies security flaws in operating… github/codeql — CodeQL is a semantic code analysis engine and vulnerability scanning tool that treats source code as data. It utilizes…