The following repository aimed to research what popular static analisys security testing (SAST) tools are best in vulnerabilities finding. The experiment would take several SAST instruments that able to multi-language scan in application, therefore, tools like Bandit or Clang-analizer are not in the testing list.
Main research file: RESEARCH
- IAMeter by Positive Technologies for Go, Java, PHP
- OWASP Benchmark for Java, Python
- NIST Juliet for Java, C/C++, C#