tiandiyixian Goto Github PK

oss-review-toolkit

A suite of tools to assist with reviewing Open Source Software dependencies.

ossa

Open-Source Security Architecture | 开源安全架构

osspolice

Identifying Open-Source License Violation and 1-day Security Risk at Large Scale

paper

Web Security Technology & Vulnerability Analysis Whitepapers

patrowlmanager

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

pfff

pfff is mainly an OCaml API to write static analysis, dynamic analysis, code visualizations, code navigations, or style-preserving source-to-source transformations such as refactorings on source code.

phan-taint-check-plugin

Github mirror of "mediawiki/tools/phan/SecurityCheckPlugin" - our actual code is hosted with Gerrit (please see https://www.mediawiki.org/wiki/Developer_access for contributing)

phasar

A LLVM-based static analysis framework.

phosphor

Phosphor: Dynamic Taint Tracking for the JVM

php_test

test_php

phpcs-security-audit

phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code

phpjoern

Parser utility to generate ASTs from PHP source code suitable to be processed by Joern.

pintools

Pintool example and PoC for dynamic binary analysis

piof

PIOF - PHP Instrumentation Open Framework - A dynamic and modular instrumentation framework for PHP language.

piof-iast

PHP Open Iast Agent

plato

JavaScript source code visualization, static analysis, and complexity tool

plsql-parser

ANTLR PL/SQL 11g parser

pmd-ssl-security-rules

An extension for the Eclipse plugin PMD which highlights insecure Internet connections on Android

pmd_custom_security_rule

progex

PROGEX (Program Graph Extractor); a cross platform tool for extracting graphical program representations from software source code

progpilot

A static analysis tool for security

pronto

Quick automated code review of your changes

pyre-check

Performant type-checking for python.

pyre-security-configs

A repository to contain source/sink definitions for Pyre to use

pyt

A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications

python_sec

python安全和代码审计相关资料收集 resource collection of python security and code review

ql

The standard QL libraries and queries that power LGTM.com and other Semmle Products

redebug

ReDeBug Source Code.

reviewdog

:dog: Automated code review tool integrated with any code analysis tools regardless of programming language

rose-develop

The latest development version of rose. It may not pass all regression tests.