Download the PHP package pieceofcake2/security-sast without Composer
On this page you can find all versions of the php package pieceofcake2/security-sast. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download pieceofcake2/security-sast
More information about pieceofcake2/security-sast
Files in pieceofcake2/security-sast
Package security-sast
Short Description Static application security testing of a CakePHP 2 application with Semgrep or PHPStan, as a PDF report by rule and risk
License MIT
Homepage https://pieceofcake2.github.io/security-sast/
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package security-sast
pieceofcake2/security-sast
Static application security testing of a CakePHP 2 application: its code is scanned with Semgrep (in Docker) or
PHPStan and security rules for CakePHP 2 (SQL built from strings, redirects to values of the request, variables
printed without h(), ...), and the findings are written as an A4 PDF report by rule and risk in the design of
pieceofcake2/report, with an exit code that fails CI.
Documentation
- Website: https://pieceofcake2.github.io/security-sast/ (日本語: https://pieceofcake2.github.io/security-sast/ja/)
- Markdown: docs/ja/README.md) (for AI tools and offline reading)
Requirements
- PHP 8.0+
- Docker for Semgrep (PHPStan needs nothing else)
- Google Chrome or Chromium 131+
Installation
Reporting Issues
Please open an issue on GitHub. To report a security vulnerability, use private vulnerability reporting.
Contributing
See the contribution guidelines.
Origin
This package was created by pieceofcake2, which also maintains it. It is not a fork of another project and is not based on one.
License
The MIT License. See LICENSE.
