Rules Registry for Compliance Frameworks
-
Updated
Mar 25, 2024 - Python
GeezerVisonThe World Wide Web, restored to 800 pixels of glory. |
| Home|About|Gaming cabinet|Archives|How it works|Starter sites |
GeezerVison is showing github.com — Build software better, together
#
static-application-security-testingHere are 18 public repositories matching this topic...Sort: Most stars
Sort options
Static analysis and attack-surface scanner for AI agents — SAST for prompts, tools, MCP servers, and agent workflows. Detects capabilities, prompt risks, tool permissions, and governance gaps before deployment.
owasp security-scanner sarif devsecops sast attack-surface ai-security static-application-security-testing sarif-report prompt-injection owasp-llm-top-10 agentic-ai ai-security-tool agent-security ai-agent-security agentic-ai-security agent-security-scanner ai-security-governance
An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Static Application Security Testing (SAST) Tools.
static-code-analysis static-analyzers static-binary static-build static-code static-api-generator static-blocks static-app static-application-security-testing static-code-analyzer
A production-grade AWS DevSecOps Hybrid CI/CD Factory that enforces security and compliance at every stage of the software delivery lifecycle. Built with a hybrid IaC approach using Terraform for core platform infrastructure and CloudFormation for CI/CD orchestration.
aws cloudformation terraform iac snyk owasp-zap software-factory devsecops software-composition-analysis git-secrets static-application-security-testing cncf-falco runtime-application-self-protection dynamic-application-security-testing
AWS native Static Application Security Testing (SAST) utility to find and eradicate vulnerable software packages stored in AWS CodeArtifact. Built for both real-time distributed and centralized deployments.
python aws-lambda serverless realtime appsec aws-security python-security continuous-security devsecops software-composition-analysis cloud-security sast security-hub static-application-security-testing
A PHPStan extension that checks your code for security vulnerabilities
Bugsmirror MASST (Mobile Application Security Suite and Tools) is a comprehensive platform for end-to-end mobile application security. It offers threat detection tools for static, runtime, dynamic API testing and red teaming; robust app shielding solution for threat mitigation; threat visibility dashboard; & AI powered insight in a single platform.
anti-tampering secure-communication redteaming jailbreak-detection mobile-application-security runtime-security mobile-application-security-testing root-detection runtime-security-testing static-application-security-testing threat-monitoring app-shielding api-security-testing runtime-application-self-protection threat-mitigation device-integrity threat-dashboard dynamic-application-security-testing threat-detection-response anti-reverse-engineering
An experimental Static Application Security Testing (SAST) scanner built on GPT and the OpenAI api.
Awesome Static Application Security Testing
Linter for Go ensuring all array and slice bounds are validated.
go golang security static-code-analysis ci linter security-automation static-application-security-testing
gradle pipeline
coveralls pipeline gradle findbugs pmd checkstyle static-analysis sonarqube junit jacoco codecov code-coverage software-composition-analysis blackduck sast sdkman static-application-security-testing
Scans your repo with an LLM and outputs a clean JSON report. Core rules: SQLi, XSS, Insecure Deserialization, SSRF, RCE, SSTI. Optional: Cloud (IaC) and Authorization/Business Logic checks.
ai static-code-analysis hacking application-security bugbounty secure-coding devsecops sast static-application-security-testing llm
Template CI/CD Pipeline to create a virtual environment with APK reverse engineering tools
Ecommerce Microservices application in Kotlin.
docker kubernetes microservices kafka api-gateway scheduler service-discovery circuit-breaker vulnerability-scanners static-application-security-testing transactional-outbox-pattern dynamic-application-security-testing
End-to-end DevSecOps CI/CD pipeline for a Java application using Jenkins, AWS, Docker, SonarCloud, Snyk, Trivy, and OWASP ZAP Baseline Scan.
java docker jenkins aws devops spring-boot maven webhook ec2-instance dockerhub owasp-zap security-automation software-composition-analysis sonarcloud ci-cd-pipeline devsecops-pipeline static-application-security-testing trivy-scan snyk-scan dynamic-application-security-testing-dast
A framework for code security that provides abstractions for static analysis tools and datasets to support their integration, testing, and evaluation.
Fast multi-language SAST for CI/CD gates: seven language frontends lower to one SSA IR (gIR) analyzed by a single inter-procedural taint engine, plus a secrets scanner and an optional LLM false-positive reviewer. Go · Python · JS/TS · Java · Rust · Ruby · C/C++.
go static-analysis ci-cd multi-language taint-analysis appsec sarif security-tools devsecops code-scanning vulnerability-scanner sast dataflow-analysis secrets-detection static-application-security-testing
Add this topic to your repoTo associate your repository with the static-application-security-testing topic, visit your repo's landing page and select "manage topics." |
| You are visitor 01402503 — GeezerVison does not store the pages you look up. Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required. |