Qwiet AI

sast-scan

Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependencies. CI and Git friendly.

codepropertygraph

Code Property Graph: specification, query language, and utilities

overflowdb

ShiftLeft OverflowDB

sbt-ci-release-early

Sbt plugin for fully automated releases, without SNAPSHOT and git sha's in the version. A remix of the best ideas from sbt-ci-release and sbt-release-early. For local CI and/or sonatype/maven central.

flask-webgoat

flask-webgoat is a deliberately-vulnerable application written with the Flask web framework.

gaum

js2cpg

HelloShiftLeft

shiftleft-java-demo

shiftleft-js-demo

shiftleft-python-demo

overflowdb-codegen

shiftleft-go-demo

Benchmark

OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools.

field-integrations

integration tools and docs

shiftleft-kotlin-demo

shiftleft-csharp-demo

shiftleft-java-example

Sample Java application with ShiftLeft Inspect integration

shiftleft-ts-demo

gather-dependencies-gradle-plugin

HelloShiftLeft-Scala

scan-reports

shiftleft-c-demo

shiftleft-php-demo

shiftleft-ruby-demo

cdxgen

Creates CycloneDX Software Bill-of-Materials (SBOM) for Node.js, Java, Python and golang projects

abide

📸 A Go testing utility for http response snapshots.

cli

A simple, fast, and fun package for building command line apps in Go

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

springboot-kotlin-webgoat