Outils d'utilisateurs

Outils du Site


code_scanners

Différences

Cette page vous donne les différences entre la révision choisie et la version actuelle de la page.

Lien vers cette vue

code_scanners [2020/03/09 09:14]
m0n5t3r
code_scanners [2023/11/10 10:50] (Version actuelle)
M0N5T3R
Ligne 6: Ligne 6:
  
  
-🛠ApplicationInspector+🛠 Semgrep  -  Semgrep accelerates your security journey by swiftly scanning code and package dependencies for known issues, software vulnerabilities, and detected secrets with unparalleled efficiency. 
 +https://github.com/semgrep/semgrep 
 + 
 +🛠 CodeQL  - CodeQL is the analysis engine used by developers to automate security checks. C , C++, java, python .. https://codeql.github.com/ 
 + 
 + 
 +🛠ApplicationInspector -
 Application Inspector is different from traditional static analysis tools in that it doesn't attempt to identify "good" or "bad" patterns; it simply reports what it finds against a set of over 400 rule patterns for feature detection including features that impact security such as the use of cryptography and more. This can be extremely helpful in reducing the time needed to determine what Open Source or other components do by examining the source directly rather than trusting to limited documentation or recommendations. Application Inspector is different from traditional static analysis tools in that it doesn't attempt to identify "good" or "bad" patterns; it simply reports what it finds against a set of over 400 rule patterns for feature detection including features that impact security such as the use of cryptography and more. This can be extremely helpful in reducing the time needed to determine what Open Source or other components do by examining the source directly rather than trusting to limited documentation or recommendations.
 The tool supports scanning various programming languages including C, C++, C#, Java, JavaScript, HTML, Python, Objective-C, Go, Ruby, PowerShell and more and can scan projects with mixed language files. The tool supports scanning various programming languages including C, C++, C#, Java, JavaScript, HTML, Python, Objective-C, Go, Ruby, PowerShell and more and can scan projects with mixed language files.
code_scanners.txt · Dernière modification: 2023/11/10 10:50 par M0N5T3R