General
Repositories
- dynamic-analysis: A curated list of dynamic analysis tools and linters
- static-analysis: A curated list of static analysis (SAST) tools and linters
Technique Articles
- Deepfactor - Security Scanning Tools Defined: SAST, IaC, SCA, DAST, IAST/RASP, Container Runtime Security and Runtime SCA
- Outpost24 - What is best for application security testing: SAST, DAST, or SCA
- Microsoft - Zero Trust DevSecOps