DryRun Logo

DryRun

1
Commercial
Visit Website

DryRun Security is a GitHub application that performs contextual security analysis of code changes during pull requests. The tool analyzes code changes in real-time within GitHub repositories, focusing on security context for developers. It examines authentication, authorization, sensitive codepaths, functions, authorship, intent, and code brittleness. The analyzer supports multiple programming languages including Python, Java, JavaScript/TypeScript, C++, C#, Golang, Rust, Swift, PHP, Ruby, Kotlin, Scala, and COBOL. It integrates directly into the GitHub workflow, providing security feedback before code merges into the main codebase. The tool utilizes AI-powered analysis to evaluate pull requests and provide security context directly within the GitHub interface.

FEATURES

ALTERNATIVES

Goof is a vulnerable Node.js demo application that includes a series of vulnerabilities and exploits

A tool that uses Apache mod_rewrite to redirect invalid URIs to a specified URL

Embeddable Yara library for Java with support for loading rules and scanning data.

Reformat and re-indent bookmarklets, ugly JavaScript, and unpack scripts with options available via UI.

Guidelines for secure coding in Java SE to avoid bugs that could weaken security and open holes in Java's security features.

A cloud-based DAST solution that discovers, inventories, and tests web applications and APIs for security vulnerabilities across diverse environments.

Static security code scanner (SAST) for Node.js applications with Docker support and integrations with Slack.

A static code analysis tool for parsing common data formats to detect hardcoded credentials and dangerous functions.

PINNED