Static Application Security Testing (SAST) Software Resources

Checkmarx is an ultimate tool for Static code scan and analysis through code vulnerability testing, SCA and secret detections. They have a prebuilt engine to get the issues from the code.

Show More

Show Less

Yes, in that for non-commercial users, payment is unnecessary. Additionally, its source is publicly available.

Show More

Show Less

Hi James, Thanks for your question. Think of CodeSonar as a three layer architecture. There are build, analysis and storage layers. All layers can be combined together and run in a single environment (VM, container, ...) or they can all be split into their respective environments. The most popular deployment puts compute and storage together, or build and compute together. Each of the components can be run anywhere in the Azure ecosystem. Kicking off the CI/CD process can be done from a command-line as part of the build process and there is a well-documented API available as well. The GrammaTech support team can assist with detailed information if needed. Disclaimer: I am employed by GrammaTech

Show More

Show Less