The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

Static code analyzer for TypeScript

A declarative static analysis tool for jvm bytecode based Datalog like CodeQL

A set of curated exercises to help you prepare for the CKS exam

Integrate SonarQube scanner to GitHub Actions

Run a security scan on your terraform with the very nice https://github.com/aquasecurity/tfsec

A small guide for C/C++ developers to useful extensions to unleash the power of Visual Studio Code

PHP Static Analysis in Github Actions.

A Github Action for ShellCheck

🔬 Industrial-grade static analysis for all popular programming languages. Catch 1000+ bug patterns before production

Application Portfolio Auditor is a tool assessing cloud readiness, quality, and security of large sets of apps. It gathers and aggregates insights of multiple software analyzers.

Run zizmor from GitHub Actions!

Making CoreOS' Clair easily work in CI/CD pipelines

Analysing source code locally with SonarQube in a Docker environment.

A GitHub Action that automatically identifies anti-patterns in SQL queries using sqlcheck when PR is requested. Please [✩Star] if you're using it!

Development environment for Jenkins' Warnings Next Generation Plugin

coala base docker image

Execute static analysis through CodeChecker in the CI.

Inter-procedural analysis framework and dependency/information-flow analysis for LLVM

Violet: Selective Symbolic Execution to Detect Bad Performance Misconfiguration