🔎 Static code analysis engine to find security issues in code.
Fork of the Semgrep engine that runs Semgrep rules unchanged.
alternative à SonarQube Cloud
Semgrep
1 outil remplace Semgrep, dont 1 en drop-in
Chargement du README
non signée La dernière release, v1.179.0, ne porte aucune signature que GitHub puisse vérifier.
Chargement du rapport de sécurité
- SonarQube CloudRule-based scans of many languages from the CLI or in CI, with no server keeping findings across branches.Partiel