SAST Scanners
Static analysis tooling. Please LMK if you know of more!
Example usages for most of these can be found in this directory: https://github.com/Skelmis/Hermes/tree/master/home/analysis
Good sast tool for Python code.
Link: https://github.com/PyCQA/bandit
Usage: uvx bandit -q -r <folder>
Link: https://github.com/presidentbeef/brakeman
Usage: brakeman --no-exit-on-warn --no-exit-on-error -A --force <folder> (install seperate)
Like Bandit, but for go
Link: https://github.com/securego/gosec
Usage: gosec -quiet <folder> (Install separate)
Generic scanner for all the things. Non commerical usage.
Link: https://github.com/semgrep/semgrep
Usage: uvx semgrep scan -q --config auto --no-git-ignore <folder>
There also exists a more ‘open’ version of this here https://github.com/opengrep/opengrep