G

GL-Secure Analyzer

SAST Analyzer for detecting leaked secrets

Dependency Scanning Analyzer based on Gemnasium.

SAST Analyzer based on Semgrep

SAST Analyzer based on SpotBugs and Find Sec Bugs.

SAST Analyzer for Phoenix Elixir projects based on sobelow

SAST Analyzer for Kubernetes manifests based on kubesec

SAST Analyzer for Salesforce Apex projects based on pmd

GitLab Analyzer for Infrastructure as Code (IaC) projects that calls kics. This analyzer is written in Go using the command library shared by all analyzers.

Go packages to implement analyzers

Collection of shell scripts packaged with SAST analyzers to enable post-analyzer integrations.