GitHub - Bearer/bearer: Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

bearer-cli-overview-cc.mp4 Bearer CLI scans your source code for: Security risks and vulnerabilities using built-in rules covering the OWASP Top 10 and CWE Top 25, such as: A01: Access control (e.g. Path Traversal, Open Redirect, Exposure of Sensitive Information). A02: Cryptographic Failures (e.g. Weak Algorithm, Insecure Communication). A03: Injection (e.g. SQL Injection, Input Validation, XSS,

[tmatsuu]

オープンソースのSAST(静的アプリケーションセキュリティテスト)ツール。現時点ではJavaScriptとRubyに対応。OWASP Top 10に基づきセキュリティ的にリスクのある箇所を指摘してくれるっぽい。機微な情報は暗号化しろよなど。