Plugin for JADX to integrate MCP server

IDEA静态代码安全审计及漏洞一键修复插件

xAST评价体系，让安全工具不再“黑盒”. The xAST evaluation benchmark makes security tools no longer a "black box".

SecHub provides a central API to test software with different security tools.

Includes day-wise notes, Jenkinsfiles, pipeline examples, and hands-on resources to learn Jenkins CI/CD from scratch to production-ready workflows.

Udemy Course on DevSecOps

Delvelin is a Code Vulnerability Analyzer for Java and Kotlin that supports best practices in security and risk management.

Application security best practices and code implementations for Java developers. This project is intended for didactic purposes only, supporting my training course.

Damn Vulnerable SCA Application

Vulnerability consolidation and management tool, enhances scan results by merging different findings of the same weakness across multiple static/dynamic scans

Dismiss GitHub Code Scanning alerts from SARIF suppression data

A monorepo filtering workaround for GitHub Advanced Security Code Scanning using renaming of the scanning tool in an Actions workflow

Spring Boot backend for evaluating Large Language Models on the detection of Indicators of Compromise (IoCs) embedded as secrets in obfuscated JavaScript code. In this implementation, the IoC is an IP address hidden inside transformed JS files. The service exposes REST APIs to query multiple LLM providers and normalize their IoC detection responses

Oversecured Extension for Gradle

DASCA combines dynamic and static techniques for analysing code for finding security (i.e., vulnerabilities), safety, or reliability problems.

cxflow example for JavaVulnerableLab

Controller for SAST-AI-Workflows. This project schedules, monitors, and serves workflow info to REST clients 🧠📡

codecov

Proof of concept of Veracode custom cleanser annotations in sample Java application

The Sec1 Security plugin provides both SCA and SAST capabilities, enabling teams to scan SCM repositories for open-source vulnerabilities and analyze code to detect security issues early in development.