Skip to content

Commit 3cb6070

Browse files
committed
docs(sasts): bump SAST tools version
1 parent 79db955 commit 3cb6070

File tree

5 files changed

+5
-5
lines changed

5 files changed

+5
-5
lines changed

docs/sast/profiles/bearer.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ name: Bearer
22
description: Bearer is a static application security testing (SAST) tool designed to scan your source code and analyze data flows to identify, filter, and prioritize security and privacy risks.
33
type: Data Flow Analysis (Source code)
44
url: https://github.com/Bearer/bearer
5-
supported_version: 1.151.0
5+
supported_version: 1.51.1
66
supported_languages:
77
- Java
88
legal:

docs/sast/profiles/semgrepce.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ name: Semgrep Community Edition
22
description: Semgrep is a fast, open-source, static analysis tool that searches code, finds bugs, and enforces secure guardrails and coding standards. Semgrep supports 30+ languages and can run in an IDE, as a pre-commit check, and as part of CI/CD workflows.
33
type: Pattern matching
44
url: https://github.com/semgrep/semgrep
5-
supported_version: 1.128.1
5+
supported_version: 1.143.0
66
supported_languages:
77
- C/C++
88
- Java

docs/sast/profiles/snykcode.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ name: Snyk Code
22
description: Snyk Code is a developer-first static application security testing (SAST) solution. By scanning code in real-time and providing actionable insights directly in the developer workflow across IDEs, repositories, and CI/CD pipelines, you can identify and address vulnerabilities early on. The AI-based engine results in fewer false positives for your developers, improving code quality and security.
33
type: Data Flow Analysis (Source code)
44
url: https://docs.snyk.io/scan-with-snyk/snyk-code
5-
supported_version: 1.1298.3
5+
supported_version: 1.1301.0
66
supported_languages:
77
- C/C++
88
- Java

docs/sast/profiles/spotbugs.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ name: SpotBugs
22
description: SpotBugs is a program which uses static analysis to look for bugs in Java code. SpotBugs is a fork of FindBugs (which is now an abandoned project), carrying on from the point where it left off with support of its community.
33
type: Data Flow Analysis (Compiled code)
44
url: https://github.com/spotbugs/spotbugs
5-
supported_version: 4.9.7
5+
supported_version: 4.9.8
66
supported_languages:
77
- Java
88
legal:

tests/Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,7 @@ RUN pip install --no-cache semgrep
4848
# Bearer
4949
RUN curl -sfL https://raw.githubusercontent.com/Bearer/bearer/main/contrib/install.sh | BINDIR=/usr/bin sh
5050
# SpotBugs
51-
RUN curl -sL https://github.com/spotbugs/spotbugs/releases/download/4.9.7/spotbugs-4.9.7.tgz | tar -xzvf - && \
51+
RUN curl -sL https://github.com/spotbugs/spotbugs/releases/download/4.9.8/spotbugs-4.9.8.tgz | tar -xzvf - && \
5252
mv spotbugs-* /tmp/spotbugs
5353
ENV PATH="/tmp/spotbugs/bin:$PATH"
5454
# Cppcheck

0 commit comments

Comments
 (0)