Skip to content

Missing security tools report #2741

Description

@github-actions

Checking if each tool that detects security issues is included in the documentation:

✅ GolangCI-Lint (Go) is included, supports 3 security code patterns
✅ Flawfinder (C, CPP) is included, supports 222 security code patterns
✅ Agentlinter (Markdown) is included, supports 20 security code patterns
✅ PHP_CodeSniffer (PHP) is included, supports 7 security code patterns
✅ Biome (Javascript, TypeScript) is included, supports 14 security code patterns
✅ Clang-Tidy (C, CPP, Objective C) is included, supports 31 security code patterns
✅ Revive (Go) is included, supports 2 security code patterns
✅ Checkov (JSON, YAML, Terraform) is included, supports 1207 security code patterns
❌ Oxlint (Javascript, TypeScript) ISN'T included, supports 16 security code patterns
✅ PSScriptAnalyzer (Powershell) is included, supports 7 security code patterns
✅ Stylelint (CSS, LESS, SASS) is included, supports 2 security code patterns
✅ Trivy (Dart, XML, TypeScript, Python, Javascript, Elixir, PHP, C, CSharp, Swift, CPP, Scala, JSON, Rust, Ruby, Terraform, Go, Java, Dockerfile, YAML) is included, supports 6 security code patterns
✅ Spectral (YAML, JSON) is included, supports 5 security code patterns
✅ CodeNarc (Groovy) is included, supports 10 security code patterns
✅ PHP Mess Detector (PHP) is included, supports 1 security code patterns
✅ dartanalyzer (Dart) is included, supports 4 security code patterns
✅ Brakeman (Ruby) is included, supports 68 security code patterns
✅ PMD (PLSQL, XML, JSP, Apex, Javascript, VisualForce, Kotlin, Java, Swift, TypeScript, Velocity) is included, supports 17 security code patterns
✅ Opengrep (PLSQL, Shell, TypeScript, Python, Javascript, PHP, C, CPP, Scala, Rust, Ruby, Terraform, Apex, Go, Kotlin, CSharp, Java, Dockerfile, YAML, SQL, Swift) is included, supports 2142 security code patterns
✅ SwiftLint (Swift) is included, supports 1 security code patterns
✅ Ruff (Python) is included, supports 77 security code patterns
✅ Cppcheck (C, CPP) is included, supports 10 security code patterns
✅ ESLint (Javascript, TypeScript) is included, supports 130 security code patterns
✅ Pylint (Python) is included, supports 2 security code patterns
✅ Credo (Elixir) is included, supports 3 security code patterns
✅ ShellCheck (Shell) is included, supports 3 security code patterns
✅ SpotBugs (Java, Scala) is included, supports 199 security code patterns
✅ RuboCop (Ruby) is included, supports 21 security code patterns
✅ SonarC# (CSharp) is included, supports 52 security code patterns
✅ Prospector (Python) is included, supports 2 security code patterns
✅ ESLint (Javascript, TypeScript) is included, supports 73 security code patterns
✅ Gosec (Go) is included, supports 35 security code patterns
✅ Codacy ScalaMeta Pro (Scala) is included, supports 34 security code patterns
✅ SonarVB (VisualBasic) is included, supports 19 security code patterns
✅ PMD (PLSQL, XML, JSP, Velocity, Apex, Javascript, VisualForce, Java, SQL) is included, supports 18 security code patterns
✅ Hadolint (Dockerfile) is included, supports 2 security code patterns
✅ Bandit (Python) is included, supports 81 security code patterns

Found 1 tools that aren't included in the documentation.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions