Choosing Appropriate Scanners for Repository Security¶
Boost Security offers a comprehensive suite of robust scanners. These scanners are designed to effectively detect and resolve potential security risks, providing you with a thorough and reliable security solution. You have the flexibility to choose from a wide range of scanners. Each scanner is designed to cater to specific needs, making it easier for you to decide which ones are most appropriate for your particular repository.
That's why Boost Security provides a range of tools tailored to different programming languages, enabling you to pinpoint potential vulnerabilities in your repository with ease which are:
| Scanner | Security Requirement | Supports |
|---|---|---|
| BoostNative | SAST | Go, Java, JavaScript, Python, Ruby, Terraform, TypeScript |
| Brakeman | SAST | Ruby |
| Bundler Audit | SCA | Ruby |
| Checkov | IaC | Ansible, CloudFormation, Kubernetes, Serverless, Terraform |
| Checkov TF Plan | IaC | Terraform plan |
| CodeQL | SAST | Go, Java, JavaScript, Python, Ruby, TSX, TypeScript |
| Gitleaks | Secrets | Any file |
| GoSec | SAST | Go |
| Malcontent | SAST | Any file |
| Modelscan | SAST | AI/ML model files |
| Nancy | SCA | Go |
| NPM Audit | SCA | JavaScript, TypeScript |
| OpenSecurity mobsfscan | SAST | Android, iOS |
| OSV Scalibr (FS SBOM) | SBOM | C/C++, Dart, .NET, Elixir, Go, Haskell, Java, JavaScript, PHP, Python, R, Ruby, Rust |
| OSV Scanner | SCA | C/C++, Dart, .NET, Elixir, Go, Haskell, Java, JavaScript, PHP, Python, R, Ruby, Rust |
| Safety | SCA | Python |
| Semgrep | SAST | C, Docker, Go, Java, JavaScript, Kotlin, PHP, Python, Ruby, Rust, Scala, Terraform, TSX, TypeScript |
| Snyk | SCA | Go, Java, JavaScript, Kotlin, PHP, Python, Ruby, Scala |
| Trivy (Filesystem Scanning) | SCA | C/C++, Dart, .NET, Elixir, Go, Java, JavaScript, Julia, PHP, Python, Ruby, Rust, Swift |
| Trivy (FS SBOM) | SBOM | C/C++, Dart, .NET, Elixir, Go, Java, JavaScript, Julia, PHP, Python, Ruby, Rust, Swift |
| Trivy (Image scanning) | Container scanning, Secrets | Container images |