Skip to content

Secrets detection and SAST

Choose a tag to compare

View all tags
@mananqayas mananqayas released this 12 Oct 21:53
· 89 commits to main since this release
v2.0.0
f4e9887
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Added

  • Gitleaks CI Integration: Added CI scans for secrets using gitleaks
  • Custom Semgrep SAST Framework: Integrated Semgrep engine targeting the CWE Top 25 matrix.
  • Deployed CWE Top 25 Rules: Deployed 25 custom cwe top 25 rules alongside matching test suites.
  • ADRs 0003/0004 for Gitleaks and Semgrep.
Assets 2
Loading