Skip to content

Boost Security

Insecure coding practices

English
Français

Initializing search

Introduction to Boost Security
How-to Guides
Reference
What's new

Boost Security

Introduction to Boost Security
Introduction to Boost Security
- About Boost Security
  About Boost Security
  - User Experiences
  - Theme Settings
- Getting Started
How-to Guides
How-to Guides
- Integrate with Source Code Management
  Integrate with Source Code Management
  - Azure DevOps
    
    Azure DevOps
    
    Integrate Azure DevOps with Boost Security
    
    Entra ID and ADO Service Principal Configuration
  - Bitbucket
  - GitHub
  - GitLab
    
    GitLab
    
    SCA Findings
  - AWS CodeCommit
- Zero Touch Provisioning
  Zero Touch Provisioning
  - Install ZTP for Azure DevOps
    
    Install ZTP for Azure DevOps
    
    Uninstall
  - Install ZTP for Bitbucket
    
    Install ZTP for Bitbucket
    
    Uninstall
  - Install ZTP for GitHub
    
    Install ZTP for GitHub
    
    Uninstall
  - Install ZTP for GitLab
    
    Install ZTP for GitLab
    
    Uninstall
- Tuning Provisioning
  Tuning Provisioning
  - Increasing Scanner Timeout
  - Ignoring Failure
- Software Bill Of Materials
  Software Bill Of Materials
  - Generating an SBOM
    
    Generating an SBOM
    
    Via AWS ECR
  - Configure Forbidden Licences
- Policy
  Policy
- Findings
  Findings
  - Snooze or Suppress Findings
    Snooze or Suppress Findings
    
    Suppression By Policy
    
    Via the UI
    
    Boostignore
  - Findings Deduplication
  - Triage Actions
- Integrating with Third-Party
  Integrating with Third-Party
  - Artificial Intelligence (AI)
    
    Artificial Intelligence (AI)
    
    AI-assisted Remediation
    
    AI-assisted Remediation
    
    Model Constraints - Amazon Bedrock
    
    Non-AI Remediation
  - Notification Services
    
    Notification Services
    
    Jira
    
    Slack
    
    Teams
  - Scanners
    
    Scanners
    
    Checkmarx
    
    Snyk
    
    SonarQube
    
    Dependabot
    
    BlackDuck
  - Kubernetes
    
    Kubernetes
    
    Installation
    
    Code-To-Cloud Visibility
  - Code-To-Cloud Context Providers
    
    Code-To-Cloud Context Providers
    
    Wiz
    
    Dynatrace
    
    Google Artifact Registry
- Removing Data
  Removing Data
  - Remove a Repo
  - Deprovision ZTP
Reference
Reference
- Platform User Interface
  Platform User Interface
  - Dashboard
  - Scans
  - Filters in Boost
  - Findings
    
    Findings
    
    Filter Options for Findings
  - Security Events
  - Projects
    
    Projects
    
    Project
  - Posture Reports
  - Policy
    
    Policy
    
    Policy Rule Categories
    
    Policy Actions
    
    Actions vs Rule Categories
  - Scanner Coverage
    
    Scanner Coverage
    
    Provision Scanners
    
    Configure Scanners
    
    Global Scanner Configuration
    
    Deprovision Scanners
  - Supply Chain Inventory
    
    Supply Chain Inventory
    
    Supply Chain AI Component Detection
  - SBOM
    
    SBOM
    
    SBOM Upload
    
    Coverage
    
    Vulnerability
  - Compliance
  - Asset Management
    
    Asset Management
    
    Manage Monorepos
    
    Manual Tags
    
    Asset Groups
    
    Manaul Tags vs Asset Groups
    
    Archive Assets
    
    CSV Export Columns
    
    Multi Branch Support
  - Audit
- Scanners
  Scanners
  - SAST
  - SCA
  - SBOM
    
    SBOM
    
    Container
  - Secrets
  - Scanner Rules
    
    Scanner Rules
    
    BoostSecurity Scanner
    
    Checkov
    
    Checkmarx Scanner
    
    Gosec
    
    GitLeaks
    
    Semgrep
    
    Trivy Image
- CI Integration
  CI Integration
  - Configuring Scanner Modules
  - AWS CodeBuild
  - Azure DevOps
  - Bitbucket
  - Buildkite
  - Circle CI
  - GitHub
  - GitLab
    
    GitLab
    
    Replace GitLab Container Scan
  - Jenkins
- MCP Server
  MCP Server
  - Installation & Configuration
  - MCP Server: In Action
- API
  API
  - Creating an API Key
  - Using the GraphQL API
    
    Using the GraphQL API
    
    GraphQL Audit Endpoint
  - Integrate Boost Security to
    Integrate Boost Security to
    
    Power BI
- Deployments
  Deployments
  - GitLab
- Terminology
  Terminology
  - Boost Security Terminology
  - Source Code Management Terminology
- FAQs
What's new

Insecure coding practices¶

This page lists all the insecure coding practices that Boost Security currently detects.

Name	Id	Description

Change cookie settings

Made with Material for MkDocs