The following security tools are implemented by Jit workflows to detect potential security vulnerabilities:
| Security Tool | Layer | Jit Security Control | Supports | Documentation |
|---|
| Semgrep | Application Security | Scan your code for vulnerabilities (SAST) | Javascript, Typescript, Python, Go, Java, Scala, Kotlin, Swift, Rust, C#, PHP, C, C++ | repo |
| Gosec | Application Security | Scan your code for vulnerabilities (SAST) | Go | repo |
| Gitleaks | Application Security | Scan code for hard-coded secrets | Text files | repo |
| TruffleHog | Application Security | Scan code for hard-coded secrets | Text files | repo |
| Nancy | Application Security | Scan your code dependencies for vulnerabilities (SCA) | Go | repo |
| OSV-Scanner | Application Security | Scan your code dependencies for vulnerabilities (SCA) | Python, PHP, Java | repo |
| npm-audit | Application Security | Scan your code dependencies for vulnerabilities (SCA) | Javascript, Typescript | docs |
| Trivy | Application Security | Scan your Dockerfiles for vulnerabilities | Dockerfile | repo |
| KICS | Cloud Security | Scan your infrastructure-as-code (IaC) for misconfigurations | Terraform, Serverless Framework, Pulumi, CloudFormation, AWS CDK | repo |
| Kubescape | Cloud Security | Scan Kubernetes configuration files | K8s manifest files, Helm charts | repo |
| Prowler | Cloud Security | Scan infrastructure for runtime misconfigurations | AWS, GCP, Azure | repo |
| AWS Security Hub | Cloud Security | Import AWS Security Hub Findings | AWS | documentation |
| AWS MFA Checker | Cloud Security | Verify that the users of your AWS accounts have enabled MFA | AWS | Jit tool |
| ZAP | DAST | Scan your API for vulnerabilities (DAST)
Scan your web application for vulnerabilities (DAST) | APIs, Web applications | repo |
| Legitify | CI/CD Security | Detect GitHub misconfigurations | GitHub | repo |
| GitHub MFA Checker | CI/CD Security | Verify that MFA for your GitHub organization is enabled | GitHub | Jit tool |
| GitHub BP Checker | CI/CD Security | Verify that Github Branch Protection is properly configured | GitHub | Jit tool |
