WARNING

work in progress - not implemented

Security

DAST

• OWASP ZAP

• WAPITI

STATIC CODE ANALYSIS

• snyk

• semgrep

• sonarqube

• codeql

SUPPLY CHAIN SECURITY

• dependabot

• renovate bot

• snyk

• github dependency check and review (graph)

WARNING

depencency checks by those tools for npm require the lockfile to be commited.