code-scanning-third-party-integrations.md

Code Scanning 3rd Party Integrations List

Public Projects

Name	Technologies	Tools
Android (AndroGoat)	Kotlin	MobSF
iOS (OWASP/iGoat-Swift)	Swift	MobSF
JavaScript (bkimminich/juice-shop)	JavaScript	CodeQL
PHP (OWASP/OWASPWebGoatPHP)	PHP, JavaScript	CodeQL, SL Scan (ShiftLeft)
IaC / Terraform (bridgecrewio/terragoat)	Terraform	Bridgecrew (Checkov), TFSec

Code Scanning - Languages

Apache Velocity

• PDM
• ShiftLeft

Apex

• CodeScan
• PDM
  • Apex Example
• ShiftLeft

Bash

• ShiftLeft

Go

• ShiftLeft

JSP

• ShiftLeft

Java

• MobSF
• PDM
• ShiftLeft

JavaScript

• CodeScan
• ESLint (OSSAR)
• PDM
• ShiftLeft

Kotlin

• Detekt (Code Quality)
  • Kotlin Example
• MobSF
• ShiftLeft
  • Kotlin Example

Lightning (Aura and LWC)

• CodeScan

Modelica

• PDM

ObjectiveC

• MobSF

PHP

• psalm
  • PHP Example
• ShiftLeft
  • PHP Example

PL/SQL

• PDM
  • PL/SQL Example
• ShiftLeft

Python

• Bandit (OSSAR)
• ShiftLeft

Ruby

• Rubocop
  • Ruby Example

Salesforce Metadata

• CodeScan

Scala

• PDM

Swift

• MobSF

T-SQL

• TSQLLint via Codacy action

Visualforce

• CodeScan
• PDM
• ShiftLeft

XSL

• PDM

Code Scanning - Technologies

Ansible

• KICS
• ShiftLeft

Binaries Analysis

• BinSkim (OSSAR)

CloudFormation

• KICS
• Action for CloudFormation Linter

Docker

• Anchore
• KICS
• Trivy

Kubernetes

• Accurics
  • Commercial Requirement for Private Repositories
• KICS
• ShiftLeft

Mobile

• MobSF
  • Mobile-iOS Example
  • Mobile-Android Example

Terraform

• Accurics
  • Commercial Requirement for Private Repositories
• Bridgecrew (Checkov)
  • Commercial Requirement for Private Repositories
  • Terraform Example
• CodeScan
• KICS
• Kubesec
  • Terraform Example
• ShiftLeft
• TFSec
  • Terraform Example

Windows Containers

• Anchore