How to scan your ruby or JS project for security improvements, for free.

Security tools are intimidating. They’re made for security teams that already know the jargon and the details like CWE identifiers. But what about developers? We have tools that check for vulnerable dependencies and tools that check for leaked secrets, but we’re missing easy—actionable—advice on making our code more secure.

Good news! There’s a free open-source tool that can scan your code, check for known risks, and give you a list of things that need fixing. All are sorted by how …

actionable advice appsec check cli code cwe dependencies developers free leaked making missing project risks ruby scan secrets security security teams security tools teams things tool tools vulnerable