Combine all available linters to automatically validate your sources without configuration

mobsfscan is a SAST that can find insecure code patterns in your Android and iOS source code

Execute Flawfinder to scan source code for vulnerabilities

checks if your Node.js installation is vulnerable to known security vulnerabilities

Scan your projects with Qodana on GitHub. Docs: https://jb.gg/qodana-github-action

Run security analyzers

ghascompliance

Runs Semgrep with all rules from semgrep-rules-manager

Run rules in a GitHub repository

Check for vulnerabilities in your container image

Code-Pathfinder open-source alternative to CodeQL

Scalable and interprocedural C# code analyzer for detecting race condition, null pointer derefs and resource leaks

GitHub Action for performing differential scans using ShellCheck linter

Run tfsec against terraform code base and upload the sarif output to the github repo

Scans your code for violations using Salesforce Code Analyzer, uploads results as an artifact, and creates a job summary

Runs tfsec and outputs any failures

Simplify Checkmarx Scanning of source code along with Result consumption leveraging Checkmarx CxFlow solution

Find security vulnerabilities in your PHP codebase with Psalm, a free and open-source tool created by Vimeo

Add flair to your infrastructure repositories with Terrafetch

Execute PMD static code analysis