codescan 开源项目推荐（14 个）

murphysecurity /murphysec

An open source tool focused on software supply chain security. 墨菲安全专注于软件供应链安全，具备专业的软件成分分析（SCA）、漏洞检测、专业漏洞库。

Zjackky /CodeScan

一款轻量级匹配Sink点的代码审计扫描器，为了帮助红队过程中快速代码审计的小工具

opossum-tool /OpossumUI

A light-weight app to audit and inventory large codebases for open source license compliance.

asc-me /graphban

The Kanban board for agents, make your apps production ready.

klezVirus /codegrepper

Pure python, self-contained, silly implementation of a SAST tool

LiMeii /angular-ngrx

The purpose of this demo code is to practice NGRX and learn how to use state, action, effect, reducer, and selector in Angular14.

fdl66 /Golang_SCA

Golang SCA（Software Composition Analysis） 通过分析你的go.mod文件，协助你发现，Golang项目的依赖库是否存在漏洞

SkyN9ne /CodeQL

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

jitalin /GFCodeScan

The use of CAShappeLayer real-time capture of the scanned graphics, you can automatically scan and provide a return of the data interface；利用CAShappeLayer 实时捕捉扫描的图形，可以自动扫描并提供返回的数据接口

visual-req /visual-devops

View DevOps Dashboards based on aggregated data from code repository, ci, code scan and artifacts

codescan-ai /codescanai-action

A Github action that provides CodeScanAI project to be used in Github workflows.

pachulujambio /Bar-Code-Scanner-API

Escaner de QR y código de barras hecho en Android Studio, el cual contiene una conexión a una API para consultar webServices

liminal-security /scan-action

Use entro scan action to scan your pull requests for hardcoded secrets and passwords.

vaaPo /oracle-sqlcl-mcp-trivadis-poc

Proof of concept for validating repository SQL and PL/SQL source files with Oracle SQLcl Codescan, SQLcl MCP, and Trivadis-style rules