scodescanner: scan the source code for finding the Critical Vulnerabilities

by do son · August 11, 2022

SCodeScanner

SCodeScanner stands for Source Code scanner where the user can scan the source code for finding the Critical Vulnerabilities. The main objective of this scanner is to find the vulnerabilities inside the source code before the code gets published in Prod.

Features

Supported PHP Language
Supported YAML Language
Pass results to bug tracking services like Jira also Slack (Sending files to groups to multiple people at once).
Gives results in JSON format, which can easily be used in any other program.
Works with Rules. We only need to create some rules in which the target rule is not present in the php/yaml directory.
Rules that can scan advanced patterns