#owasp
Rulesets (13)
Ajin AbrahamRules from the preeminent Node.js security scanner, NodeJSScan.
r2cSelected rules from Bandit, a security checker for Python, rewritten in Semgrep.
r2cSelected rules from FindSecBugs, a security checker for Java, rewritten in Semgrep.
Grayson HardawayDefault ruleset for Flask, by r2c.
Grayson HardawayRuleset accompanying r2c OWASP presentation.
Drew DennisonRules for OWASP security checks for python
Grayson HardawaySecurity rules for GitHub Actions workflow files
Bandit rules in Gitlab SAST, written by Gitlab and r2c.
A ruleset of javascript and typescript rules made for OWASP Juice Shop.
Colleen DaiOWASP Java Benchmark ruleset, a subset of java rules for faster results.
Grayson HardawayRuleset for OWASP SF
r2cThe OWASP Top 10 is an industry-recognized report of top web application security risks. Use this ruleset to scan for OWASP Top 10 vulnerabilities.
Grayson HardawayPython Meetup Check Ruleset