Skip to content
#

sast

Here are 113 public repositories matching this topic...

semgrep
Strunevskiy
Strunevskiy commented Jun 13, 2022

Describe the bug
A clear and concise description of what the bug is.
Metavariables do not work for object reference in Scala

To Reproduce
Steps to reproduce the behavior, ideally a link to https://semgrep.dev:
The link is attached https://semgrep.dev/s/zojz

Expected behavior
A clear and concise description of what you expected to happen.
Based on the link, there should be t

bug good first issue priority:medium user:external
terrascan
adegoodyer
adegoodyer commented Aug 11, 2021
  • terrascan version: 1.9.0
  • terraform version: 1.0.1

Enhancement Request

Other security scanning tools (e.g. checkov and tfsec) have a --soft-fail flag or equivalent option that allows you to always exit with 0 status.

Extremely useful when running the tool without halting a pipeline for example.

I currently use a workaround, but something more concrete would be very desira

horusec
iancardosozup
iancardosozup commented Oct 25, 2021

We currently refactoring unit test in every package of horusec, and we have a lot of code to cover. I'm opening this issue as a report and invite to community to contribute and improve our application. Currently i'm in start package refactor and we have some cases to cover and you can base on #701 to write your code

Update: Since #731 we moved flags constants to package [testutil](https://githu

good first issue kind/improvement kind/tests project/horusec-cli
prabhu
prabhu commented Apr 20, 2021

Seeing the below error while installing rush.js. Probably might need a package in the base image. Any help would be appreciated.

#21 516.9 > keytar@7.6.0 install /usr/local/lib/node_modules/@microsoft/rush/node_modules/keytar
#21 516.9 > prebuild-install || npm run build
#21 516.9 
#21 521.6 prebuild-install WARN install No prebuilt binaries found (target=14.16.0 runtime=node arch=arm64
bug good first issue help wanted

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).

  • Updated Apr 10, 2022
  • Go

Improve this page

Add a description, image, and links to the sast topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the sast topic, visit your repo's landing page and select "manage topics."

Learn more