diff --git a/data/tags.yml b/data/tags.yml index 1d1a26290..340898a27 100644 --- a/data/tags.yml +++ b/data/tags.yml @@ -292,6 +292,9 @@ - name: Support value: support type: other +- name: Spring + value: spring + type: other - name: Swift value: swift type: language diff --git a/data/tools/seqra.yml b/data/tools/seqra.yml new file mode 100644 index 000000000..d87e9a926 --- /dev/null +++ b/data/tools/seqra.yml @@ -0,0 +1,23 @@ +name: Seqra +categories: + - linter +tags: + - security + - java + - spring + - kotlin + - ci + - yaml +license: MIT +types: + - cli +source: 'https://github.com/seqra/seqra' +homepage: 'https://seqra.dev' +resources: + - title: 'Static Analysis Showdown: How Semgrep, CodeQL, and Seqra Handle XSS Detection' + url: https://seqra.dev/blog/semgrep-vs-codeql-vs-seqra +description: >- + Security-focused static analyzer for Java and Kotlin web applications. + Analyzes bytecode with Semgrep-style YAML rules and CodeQL-grade dataflow + (with first-class Spring support) to find vulnerabilities + that source-only scanners miss.