OWASP Dependency-Check is a software composition analysis tool that identifies…

Article In the wake of software supply chain attacks and…

GitHub Code Scanning provides automated security vulnerability scanning and code…

Article Modern Java development is built on a foundation of…

Fortify Static Code Analyzer (SCA) is a powerful static application…

Coverity is a powerful static application security testing (SAST) tool…

Article Parasoft Jtest is an enterprise-grade Java testing solution that…

Codacy is an automated code review tool that helps Java…

Introduction to ShiftLeft Scan ShiftLeft Scan is a Static Application…

Introduction to LGTM Integration LGTM.com (Looks Good To Me) is…