{"repo":"find-sec-bugs/find-sec-bugs","free":true,"listed":false,"github":"https://github.com/find-sec-bugs/find-sec-bugs","clone":"git clone https://github.com/find-sec-bugs/find-sec-bugs.git","description":"The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)","language":"Java","stars":2436,"topics":["findbugs","java","security-audit","owasp","taint-analysis","code-analysis","security","bytecode","cwe","static-analysis"],"license":"LGPL-3.0","category":"security-tools","readme_excerpt":"OWASP Find Security Bugs Find Security Bugs is the SpotBugs plugin for security audits of Java web applications. Website : http://find-sec-bugs.github.io/ Main developers - Philippe Arteau - David Formánek - Tomáš Polešovský from Liferay Notable contributions - David Formánek - Major improvements and refactoring on the taint analysis for injections. - The creation of a detector for hard coded passwords and cryptographic keys. - Tomáš Polešovský - Improvements and bug fixes related to the taint analysis. - Maxime Nadeau - New detectors surrounding the Play Framework and improvements related to Scala. - Naoki Kimura - Detector for injection in custom API - Translation of messages in Japanese - Dave Wichers - Improvement to vulnerability descriptions Project Sponsors The development of Find Security Bugs is supported by GoSecure since 2016. The support includes the development of new detectors and the research for new vulnerability classes. Screenshots Eclipse IntelliJ / Android Studio SonarQube License This software is release under LGPL.","default_branch":null,"files":null,"tree":[],"storefront":"/r/find-sec-bugs","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/find-sec-bugs/find-sec-bugs/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}