sonarsource Goto Github PK

altoroj

WARNING: This app contains security vulnerabilities. AltoroJ is a sample banking J2EE web application. It shows what happens when web applications are written with consideration of app functionality but not app security. It's a simple and uncluttered platform for demonstrating and learning more about real-life application security issues.

amplify

Used for https://github.com/SonarSource/SonarJS ruling

analyzers-github-static-resources

angular.js

Used for https://github.com/SonarSource/SonarJS ruling

apex-test-sources

argument-injection-vectors

A curated list of argument injection vectors

backbone

Used for https://github.com/SonarSource/SonarJS ruling

benchmark

OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.

buildtools

DEPRECATED

castor-cast-app

Chrome Cast App for Castor

cayc-research

Clean as You Code research

chocolatey-packages

cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

css-test-sources

Used for https://github.com/SonarSource/sonar-css ruling

damn-vulnerable-graphql-application

Damn Vulnerable GraphQL Application is an intentionally vulnerable implementation of Facebook's GraphQL technology, to learn and practice GraphQL Security.

devoxx

Source examples to demo our code analyzers and SonarLint

devoxx-2021

Demo

di.js

Used for https://github.com/SonarSource/SonarJS ruling

docker-sonarqube

:whale: SonarQube in Docker

dotnet-overflow

Test project containing some overflow situations

dotnet-test-sources

project sources for dotnet ITs

dsvw

Damn Small Vulnerable Web

dvna

Damn Vulnerable NodeJS Application

dvwa

Damn Vulnerable Web Application (DVWA)

ebcdic-to-ascii-converter

echoes-react

A React implementation of Echoes, Sonar's design system.

es5-shim

Used for https://github.com/SonarSource/SonarJS ruling

eslint

Find and fix problems in your JavaScript code.

eslint-config-sonarqube

ESLint configuration for SonarQube and its plugins.

eslint-plugin-sonarjs

SonarJS rules for ESLint