The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

Sample Python script for automating WebInspect scans and pushing results to SSC

Sample code for several design patterns in PHP 8.x

WebGoat is a deliberately insecure application

The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.

ClamAV - Documentation is here: https://docs.clamav.net

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

Sample source code containing vulnerabilities to illustrate Fortify usage

Apache Beam is a unified programming model for Batch and Streaming data processing.

Plugin for supporting SPDX in a Maven build.