-
👋 Hello! Not sure if this is the right place to raise this issue, but we've noticed that the way Fortify SCA is generating SARIF documents is causing a bad user experience with GitHub Code Scanning.
…
-
The following section Implementation/Secure Build/Build Process (Maturity Level 2) has the following line "Finally, add appropriate automated security checks (e.g. using SAST tools) in the pipeline to…
-
# WhiteSource SAST Security Report
Latest Scan: 2022-03-02 07:30pm
**New Findings:** 2
**Fixed Findings:** 1
**Total Findings:** 6
**Tested Project Files:** 1'458
**Detected Programmi…
-
**Is your feature request related to a problem? Please describe.**
Similar to the Vulnerability definition we provide for DAST, we need to add the support for SAST tools too. Along with this, please …
-
# 人与代码的桥梁-聊聊SAST · LoRexxar's Blog
[https://lorexxar.cn/2023/12/18/sast2024/](https://lorexxar.cn/2023/12/18/sast2024/)
-
## I expect
- a github action like the super-linter one
-
I got a problem during executing command:
m gitlab:fluidattacks/universe@trunk /skims scan ~/.makes/cache/sources/gitlab-fluidattacks-universe-trunk/integrates/secrets/lint/config.yaml
`[WARNING…
-
## 简化项目结构,将重心整合至活动(event)
旧的结构过于复杂,设计冗余过多,为了项目未来发展进行一下修改:
1. 修改并删除初期冗余设计
2. 尝试使用新的手段为各组件间解耦
3. 尝试将quartz剔除,并整合更加轻量的schedule系统
4. 优化鉴权系统,整合至sast-link等
-
Hello
The app is not running with last version of semgrep and prospector-html.
> semgrep scan --json --output semgrep-native-report.json --config=auto myapp
> prospector-html --input semg…
-
Tracking issue for:
- [x] https://github.com/hywenklis/buddy-api/security/code-scanning/6