SAST with Semgrep and SonarQube

Write custom taint-tracking rules and scan a vulnerable app with two SAST tools.

Project work by matthew lovegreen on NextWork.

Explore this project