DryRun Logo

DryRun

1
Commercial
Visit Website

DryRun Security is a GitHub application that performs contextual security analysis of code changes during pull requests. The tool analyzes code changes in real-time within GitHub repositories, focusing on security context for developers. It examines authentication, authorization, sensitive codepaths, functions, authorship, intent, and code brittleness. The analyzer supports multiple programming languages including Python, Java, JavaScript/TypeScript, C++, C#, Golang, Rust, Swift, PHP, Ruby, Kotlin, Scala, and COBOL. It integrates directly into the GitHub workflow, providing security feedback before code merges into the main codebase. The tool utilizes AI-powered analysis to evaluate pull requests and provide security context directly within the GitHub interface.

FEATURES

ALTERNATIVES

Guidelines for secure coding in Java SE to avoid bugs that could weaken security and open holes in Java's security features.

Goof is a vulnerable Node.js demo application that includes a series of vulnerabilities and exploits

A learning and training project demonstrating common configuration errors in cloud environments.

Instrumentation-based approach for resolving reflective calls in Android apps.

FingerprintJS is a client-side browser fingerprinting library that provides a unique visitor identifier unaffected by incognito mode.

A tool that safely installs packages with npm/yarn by auditing them as part of your install process.

AWS Web Application Firewall (WAF) for protecting web applications from common exploits.

Scanning APK file for URIs, endpoints & secrets.