Skip to content
#

sast

Here are 107 public repositories matching this topic...

semgrep
dlukeomalley
dlukeomalley commented Mar 8, 2022

The below is from a conversation on #4754 regarding language values. Created a ticket per @wu-s-john 's suggestion:


What do we think of pretty printing this more like a bulleted list or zshrc autocomplete columns? I suspect it adds too much complexity for the sake of this PR, and I am largely just brainstorming how to make the UX of this CLI feel modern and be easy to read/navigate.

E

terrascan
adegoodyer
adegoodyer commented Aug 11, 2021
  • terrascan version: 1.9.0
  • terraform version: 1.0.1

Enhancement Request

Other security scanning tools (e.g. checkov and tfsec) have a --soft-fail flag or equivalent option that allows you to always exit with 0 status.

Extremely useful when running the tool without halting a pipeline for example.

I currently use a workaround, but something more concrete would be very desira

horusec
iancardosozup
iancardosozup commented Oct 25, 2021

We currently refactoring unit test in every package of horusec, and we have a lot of code to cover. I'm opening this issue as a report and invite to community to contribute and improve our application. Currently i'm in start package refactor and we have some cases to cover and you can base on #701 to write your code

Update: Since #731 we moved flags constants to package [testutil](https://githu

prabhu
prabhu commented Apr 20, 2021

Seeing the below error while installing rush.js. Probably might need a package in the base image. Any help would be appreciated.

#21 516.9 > keytar@7.6.0 install /usr/local/lib/node_modules/@microsoft/rush/node_modules/keytar
#21 516.9 > prebuild-install || npm run build
#21 516.9 
#21 521.6 prebuild-install WARN install No prebuilt binaries found (target=14.16.0 runtime=node arch=arm64

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).

  • Updated Jun 28, 2021
  • Go

Improve this page

Add a description, image, and links to the sast topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the sast topic, visit your repo's landing page and select "manage topics."

Learn more