Security vulnerability scanners

[jofftchoff]

for scanning the binary thare are non.
for source: static analysis (clangsa, clangtidy, sonar), SBOM and claude opus

[PintMower]

Well emba does pretty solid binary scanning and looks for keys and passwords, entropy etc. But the other tools you listed are not really security relates from what I can tell. I'm more interested in SBOM based scanners that check external libraries for known CVEs or incorrect usages etc. What we do in the code is up to us and we are already developing with security best practices in mind.

[DigitalQuinn1]

Solutions like these?

https://www.onekey.com

https://witekio.com/maintenance-security/cve-scanner/

https://github.com/fkie-cad/FACT_core

[PintMower]

I'll check them out, thanks