Meta-schema for the Static Application Security Testing (SAST) of JSON Schemas

Opengrep adapter — CLI-mode multi-language SAST scanner

LLM SAST skills — turn your AI coding assistant into a SAST scanner for your codebase.

LLM-enhanced SAST analysis built on circle-ir

Globstar-compatible static analysis tool for Node.js - A backward-compatible reimplementation of the MIT-licensed Globstar.dev SAST

High-performance Static Application Security Testing (SAST) library for detecting security vulnerabilities through taint analysis

Agentic SAST scanner — white box, CI-ready, multi-provider. Reasoning where regex falls short.

Command to convert Gitlab SAST report to SonarQube external issue report

Framework-agnostic static analysis (SAST) library for DOM-based XSS detection via AST traversal and taint analysis.

Fracta — auditor de segurança + LGPD multi-agente e determinístico para SaaS (DAST + SAST, relatório A–F). CLI: fracta scan.

Security scanner for React, Next.js & Node — SCA, SAST, secrets. No Python or Homebrew. CSV reports, opengrep auto-download.

SAST Tool For Javascript

ExploitQ CLI — SAST, SCA, API security, and secrets scanning for CI/CD pipelines

Scaffold Node security baseline: husky + gitleaks pre-commit, Semgrep SAST, secrets CI, npm audit

Parse CSS, Sass, and SCSS into Unist syntax trees

逐码 CLI — 命令行代码安全审计工具 (SAST + SCA)

Converts tslint output into GitLab SAST report format

Owstra CLI - High-performance SAST & SCA static analysis security scanner

tools for using AppThreat/sast-scan with JupiterOne

Open-source security & code quality scanner - combines SAST, SCA/CVE, and secrets detection in a single CLI tool