container-scan-dockle

Automates mobile app security testing by scanning Android and iOS applications for vulnerabilities using OWASP MobSF framework.

Performs static analysis on Kotlin and Android codebases to identify security vulnerabilities, code smells, and potential risks automatically.

Scans AWS cloud infrastructure for security vulnerabilities, misconfigurations, and compliance risks using comprehensive PROWLER assessment framework

Scans source code for potential security vulnerabilities and coding flaws using static analysis techniques across multiple programming languages.

Scans Dockerfiles for security vulnerabilities, style violations, and best practices using Hadolint's comprehensive linting rules

Identifies potential dependency confusion vulnerabilities by analyzing project dependencies and detecting potential package name conflicts across registries.

Scans software projects for license compliance, identifying open-source licenses, potential conflicts, and attribution requirements using ScanCode toolkit.

Scans Kubernetes manifests and Helm charts for security misconfigurations, best practices, and potential vulnerabilities using kube-linter rules.

Scans open-source dependencies for known vulnerabilities using the Open Source Vulnerability (OSV) database and provides detailed security insights.

Generates secure, OWASP-compliant code templates and snippets with built-in vulnerability prevention and best practice guidelines