Search Results for "code scan"
Sort By:
Showing 43 open source projects for "code scan"
View related business solutions-
AI-powered service management for IT and enterprise teamsGive your IT, operations, and business teams the ability to deliver exceptional services—without the complexity. Maximize operational efficiency with refreshingly simple, AI-powered Freshservice.
-
MongoDB Atlas runs apps anywhereMongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
-
1
Semgrep
Lightweight static analysis for many languages
Static analysis at ludicrous speed. Find bugs and enforce code standards. Find and prevent security issues in Terraform, Docker, Kubernetes, nginx, and AWS configs before they go into production. Go beyond application code and protect the entire stack with a breadth of scanning capabilities. Don't leak secrets, scan every commit and ensure secrets don't make it to production. Protect the privileged CI/CD environment from malicious activity that could result in access to source code, secrets, and more. ... -
2
AWS Toolkit for JetBrains
A plugin for interacting with AWS from JetBrains IDEs
...If you come across bugs with the toolkit or have feature requests, please raise an issue on our GitHub repository. See the user guide for how to get started, along with what features/services are supported. CodeWhisperer uses machine learning to generate code suggestions from the existing code and comments in your IDE. Supported languages include: Java, Python, and JavaScript. In addition to providing code suggestions within your current file, CodeWhisperer can scan your code package to identify security issues. Connect to AWS using static credentials, credential process, or AWS SSO. View and manage AWS resources. ... -
3
JSDoc
An API documentation generator for JavaScript
JSDoc 3 is an API documentation generator for JavaScript, similar to Javadoc or phpDocumentor. You add documentation comments directly to your source code, right alongside the code itself. The JSDoc tool will scan your source code and generate an HTML documentation website for you. JSDoc's purpose is to document the API of your JavaScript application or library. It is assumed that you will want to document things like modules, namespaces, classes, methods, method parameters, and so on. ... -
4
Dockle
Container Image Linter for Security
...You can install dockle with the asdf version manager with this plugin, which automates the process of installing (and switching between) various versions of github release binaries. With asdf already installed, run commands to install dockle. You can scan your built image with Dockle in Travis CI/CircleCI. Though, you can ignore the specified target checkpoints by using .dockleignore file. Or, if you just want the results to display and not let the test fail for this, specify --exit-code to 0 in dockle command. -
Our Free Plans just got better! | Auth0You asked, we delivered! Auth0 is excited to expand our Free and Paid plans to include more options so you can focus on building, deploying, and scaling applications without having to worry about your security. Auth0 now, thank yourself later.
-
5
wa-automate-nodejs
WhatsApp tool for chatbots with advanced features
...For more details see Easy API. After executing create() function, @open-wa/wa-automate will create an instance of WA web. If you are not logged in, it will print a QR code in the terminal. Scan it with your phone and you are ready to go! @open-wa/wa-automate will remember the session so there is no need to authenticate every time. -
6
Gitleaks
Protect and discover secrets using Gitleaks
Gitleaks is a fast, lightweight, portable, and open-source secret scanner for git repositories, files, and directories. With over 6.8 million docker downloads, 11.2k GitHub stars, 1.7 million GitHub Downloads, thousands of weekly clones, and over 400k homebrew installs, gitleaks is the most trusted secret scanner among security professionals, enterprises, and developers. Gitleaks-Action is our official GitHub Action. You can use it to automatically run a gitleaks scan on all your team's pull... -
7
FengNiao
A command line tool for cleaning unused resources in Xcode
The FengNiao project is a lightweight command-line utility designed to help iOS/macOS developers clean up their Xcode projects by detecting and removing unused image resource files. As projects evolve, image assets often accumulate — many of which may no longer be referenced in code, storyboards, or asset catalogs; FengNiao scans the project directory (and subfolders) to identify those orphaned resources and optionally delete them, helping to reduce project bloat and potential app size. The... -
8
PowerHub
A post exploitation tool based on a web application
PowerHub is a PowerShell-based automation framework designed to centralize and orchestrate common administrative tasks across Windows environments. It exposes a modular command set for inventorying systems, managing services, deploying packages, and executing remote commands with consistent logging and error handling. The project places emphasis on discoverability and reuse: scripts are organized into reusable modules and functions with clear parameter contracts so teams can compose... -
9
Papermerge
Open Source Document Management System for Digital Archives
...Source code can be reviewed and improved by anyone from anywhere. Papermerge supports multiple users. Each user can be assigned different permissions to perform only a specific kind of action e.g. view only documents from a specific folder. OCR technology is vital part of Papermerge. It extracts text information from scanned documents, PDF, JPEG, TIFF files. -
Ship Agents FasterGemini Enterprise Agent Platform lets you rapidly build, scale, govern and optimize production-ready agents grounded in your organization's data. The platform enables developers to build custom or pre-built agents for virtually any use case. New customers get $300 in free credits.
-
10
Guides
Design and development guides
...The idea is that instead of reinventing style guides or best-practices from scratch, developers can reference this repository for high-quality external guides, articles, and checklists across many languages and ecosystems. It is not a library in the usual sense, but acts as a “meta-guide” index — a directory of authoritative resources rather than runnable code. The content is organized as Markdown links and descriptions, making it easy to scan and browse for relevant topics (for instance style guides for Ruby, JavaScript, CSS, deployment, architecture). Because it is community-driven and open to contributions, you’ll find new links and categories being added over time, helping it remain relevant. -
11
ReacType
Prototyping Tool for exporting React/Typescript Applications!
ReacType is a rapid prototyping tool built on Electron that allows users visualize their application architecture dynamically, employing a drag-and-drop canvas display and an interactive, real-time component code preview that can be exported as a React app for developers employing React component architecture alongside the comprehensive type-checking of TypeScript. In other words, you can draw prototypes and export React / TypeScript code! After opening the dmg and dragging ReacType into your Applications folder, ctrl+click the icon and select 'Open' from the context menu to run the app. ... -
12
Enlightn
Your performance & security consultant, an artisan command away
...The Enlightn OSS (open source software) version has 64 automated checks that scan your application code, web server configurations, and routes to identify performance bottlenecks, possible security vulnerabilities, and code reliability issues. Enlightn Pro (commercial) is available for purchase on the Enlightn website and has an additional 64 automated checks (a total of 128 checks). Serving Assets: Minification, cache headers, CDN, and compression headers. -
13
Xinorbis (and tools)
Source code for Xinorbis and associated tools
Xinorbis is a very powerful hard disk, folder and storage analyser. It uses a sophisticated mix of graphs, tables, and tree displays to give a complete, and unprecedented, picture of the contents of any hard disk, SSD, folder, removable or network drive. In fact, if your PC can see it, Xinorbis can scan it. Xinorbis makes it easy to see the contents, structure, file distribution, and file composition of any attached storage device. It includes fully customisable report generation in ASCII,... -
14
Coca
Coca is a toolbox which is design for legacy system refactoring
Coca is a toolbox that is design for legacy system refactoring and analysis, including call graph, concept analysis, api tree, and design patterns suggestions. Requirements: graphviz for dot file to image (such as svg, png). The easiest way to get coca is to use one of the pre-built release binaries which are available for OSX, Linux, and Windows on the release page. -
15
Open Food Facts
Native version of Open Food Facts on Android
Open Food Facts is a collaborative food products database made by everyone, for everyone. Open Food Facts contributors gather information and data on food products from around the world, using mobile apps. Open Food Facts is a database of food products with ingredients, allergens, and nutrition facts… which allow us to compute scores like Nutri-Score, NOVA groups, and Eco-Score. Open Food Facts is a non-profit association of volunteers. 25,000+ contributors like you have added 3M+ products... -
16
Security Code Scan
Vulnerability Patterns Detector for C# and VB.NET
...Visual Studio Community, Professional and Enterprise editions are supported. Other editors that support Roslyn-based analyzers like Rider or OmniSharp should work too. Security Code Scan (SCS) is not a Linter. It is a real static analysis tool that does extensive computations. Thus installing it as a Visual Studio extension or NuGet package will slow down your Visual Studio IDE. -
17
CovidPass
Web app for adding EU Digital COVID Certificates to your wallet apps
...CovidPass accomplishes this without sending your data to a server and instead only uses a hashed representation for the signing step. Add your COVID European Digital Certificate to your favorite Wallet application for your mobile. Scan the QR code on your certificate, or select a screenshot or PDF containing the QR code. Select a background color for your passport in the portfolio. Data privacy is of particular importance when processing health-related data. So that you can make an informed decision, please read the Privacy Policy. Processing of your data happens entirely in your browser and only a hashed representation is sent to the server for the signing step. -
18
Sulla
Javascript Whatsapp API library for chatbots
...As much as I would love to, I cannot dedicate a lot of time to this project so please consider checking out forked versions of sulla where other developers can dedicate more time and support to it. After executing create() function, sulla will create an instance of WhatsApp web. If you are not logged in, it will print a QR code in the terminal. Scan it with your phone and you are ready to go! Sulla will remember the session so there is no need to authenticate every time. By default QR code will appear on the terminal. The decryption is being done as fast as possible (outruns native methods). Supports big files! -
19
phpcs-security-audit v3
A set of PHP_CodeSniffer rules that finds vulnerabilities
phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code. It currently has core PHP rules as well as Drupal 7-specific rules. The tool also checks for CVE issues and security advisories related to the CMS/framework. This enables you to follow the versioning of components during static code analysis. The main reason for this project being an extension of PHP_CodeSniffer is to have easy integration into continuous... -
20
Code Catalog in Python
Algorithms and data structures for review for coding interview
code-catalog-python serves as a grab-bag of small, readable Python examples that illustrate common algorithms, data structures, and utility patterns. Each snippet aims to be self-contained and easy to study, with clear inputs, outputs, and the essential logic on display. The catalog format lets you scan for an example, copy it, and adapt it to your use case without wading through a large framework. -
21
git-secrets
Prevents you from committing secrets and credentials into git
...It works by applying configurable regular-expression patterns over commit contents (and merge history) and rejecting commits or merges that violate the policy. The tool includes hooks that integrate into git commit and git merge, as well as commands to list, add, or remove secret patterns, and to scan existing history for leaks. Teams often deploy it as part of their developer toolchain to enforce a security guardrail: you catch leaks early rather than discovering them later. It is also often used in CI pipelines or continuous code quality checks to detect in-flight vulnerabilities. While git-secrets is not a full secrets management system, it plays a key role in defense-in-depth by preventing accidental exposure in source. -
22
iView Weapp
A set of high-quality WeChat applet UI component library
Use WeChat to scan and experience the example of small program components. Before you start using iView Weapp, you need to read the micro-channel applet custom components related documents. We have built-in examples of all components, you can scan the small program code experience on the right, or view it in WeChat developer tools. Then, the examplesdirectory can be opened in the micro-channel developer tools. -
23
KAREL 3D
Learning programming language for kids
...JavaScript variant include only one small HTML file tested and works on all devices with keyboard and full JavaScript support in internet browser, or alternative pre-compiled JAVA V8 .jar file with webEngine and JavaFX and code in string. ZIP Contains examples in TXT file. More pictures and examples is here at Wiki. Wiki include ZIP with scan of original historical manuals in Slovak language from years 1987 - 1990 Today exist some variants (not mine) like: LightBot or Swift Playgrounds on tablets. Karel 3D from Version 8 is different from other Karels, can bulid a Bridges. ... -
24
RIPS - PHP Security Analysis
Free Static Code Analysis Tool for PHP Applications
RIPS is a static code analysis tool for the automated detection of security vulnerabilities in PHP applications. It was released 2010 during the Month of PHP Security (www.php-security.org). NOTE: RIPS 0.5 development is abandoned. A complete rewrite with OOP support and higher precision is available at https://www.ripstech.com/next-generation/ -
25
epyunit
PyUnit and PyDev extensions for arbitrary Executables
The package 'epyunit' provides extensions for PyUnit and PyDev. * Extensions for PyUnit - Unittests for arbitrary executables. * Extensions for PyDev - Automation of search and load of pydevd.py The extensions are applicable from commandline and/or within Eclipse. Online manuals: - https://pythonhosted.org/epyunit/ PyPi repository: - https://pypi.python.org/pypi/epyunit Current application examples are: - bash-core - http://bash-core.sourceforge.net Nickname -...