tiandiyixian Goto Github PK

rosecheckers

http://www.cert.org/secure-coding/tools/rosecheckers.cfm

saluki

Research on Saluki - software for finding taint style vulnerabilities in a binary code

sanitizers

AddressSanitizer, ThreadSanitizer, MemorySanitizer

scale

SCALe (Source Code Analysis Lab) is a static analysis aggregator/correlator which enables a source code analyst to combine static analysis results from multiple tools into one interface, and also provides mappings for diagnostics from the tools to the SEI CERT Secure Coding standards.

scancode-toolkit

:mag_right: ScanCode scans code and detects licenses, copyrights, package manifests & dependencies and more ... to discover and inventory open source and third-party packages used in your code.

scanners-box

The toolbox of open source scanners(abbr - scanbox) - 安全行业从业者自研开源扫描器合辑

scil

seahorn

SeaHorn Verification Framework

securibench-micro

Securibench Micro is a benchmark for static analysis tools for security.

securify

Security Scanner for Ethereum Smart Contracts

security-code-scan

Static code analyzer for .NET

security-development-lifecycle-reference

Security Development LifeCycle Process (安全开发生命周期参考)

security-guide-for-developers

Security Guide for Developers (实用性开发人员安全须知)

security_codes

安全开发代码归档：包括但不限于渗透测试，资产收集，大规模漏洞扫描器，网络安全相关资料文档与工具整理

security_taint_propagation

Java taint propagation for java. Define tainted sources, sanitizer methods and sinks via aspects.

securitylab

Resources related to GitHub Security Lab

securitypaper-web

Security Paper

securityqueries

seguard-java

SeGuard Java Component

sei-cert-c

C

sentinel

Automated security testing framework for web applications

shared-project-sw10-deis2037

A shared repository for the implementation part of the Master Thesis for groups deis1018 and deis1019, AAU Fall 2018

shellcheck

ShellCheck, a static analysis tool for shell scripts

siamese

Siamese: a scalable code clone search engine

slither

Static Analyzer for Solidity

smali

smali/baksmali

smartcheck

SmartCheck – a static analysis tool that detects vulnerabilities and bugs in Solidity programs (Ethereum-based smart contracts).

snyk

CLI and build-time tool to find & fix known vulnerabilities in open-source dependencies

solium

Linter to identify and fix style & security issues in Solidity

sonar-esql-plugin

Sonar plugin to analyze ESQL-sourcecode of IBM Integration Bus projects