SAST

• SemGrep Registry

pip install semgrep
wget https://gitlab.com/ignis-build/sarif-converter/-/releases/permalink/latest/downloads/bin/sarif-converter-linux-amd64
chmod +x sarif-converter-linux-amd64
git clone https://github.com/semgrep/semgrep-rules

semgrep scan --config=auto --sarif --sarif-output=scan.json
semgrep scan --config=p/python --sarif --sarif-output=scan.json
semgrep scan --config=/root/Desktop/semgrep-rules/python/ --sarif --sarif-output=scan.json


semgrep ci --code --sarif --sarif-output=sarif.json
semgrep ci --supply-chain --sarif --sarif-output=sarif.json

./sarif-converter-linux-amd64 --type html scan.json semgrep-report.html

npm install -g snyk
npm install snyk-to-html -g

snyk auth
snyk code test --json | snyk-to-html -o results.html