How do you integrate a static security analysis tool into the CI/CD pipeline

• eslint-plugin-security

  2 2,129 6.7 JavaScript

  ESLint rules for Node Security

  

ESLint. A lot of the rules are more stylistic, but there are some performance and security related checks. There are plugins (of various stability and quality), like eslint-plugin-security.

• SonarQube

  65 8,543 9.9 Java

  Continuous Inspection

  

There are commercial tools that can be integrated into a CI pipeline and/or a developer's IDE. I've used SonarQube before, but there are others.

• SurveyJS

  surveyjs.io sponsored

  Open-Source JSON Form Builder to Create Dynamic Forms Right in Your App. With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js.

  

• ESLint

  380 24,281 9.7 JavaScript

  Find and fix problems in your JavaScript code.

  

ESLint. A lot of the rules are more stylistic, but there are some performance and security related checks. There are plugins (of various stability and quality), like eslint-plugin-security.

Suggest a related project