Boostsecurity Scanner Registry

Supported Scanners

Brakeman

Native

Semgrep

Snyk

Trivy

Trivy-SBOM

CodeQL

GitLeaks

Scanner Testing

The registry includes automated testing for scanners. When a scanner is modified in a pull request, tests are automatically run across multiple CI/CD providers.

Overview

• Test Definition: Each scanner can define tests in a tests.yaml file
• Automatic Detection: Modified scanners are detected and tested on PR
• Multi-Provider: Tests run on GitHub Actions, GitLab CI, Azure DevOps, and Bitbucket

Documentation

• Setting Up Tests - How to write tests for your scanner
• Authentication Strategy - OAuth2/OIDC token architecture

Test Runner Setup (per CI/CD provider)

• GitHub Actions
• GitLab CI
• Azure DevOps
• Bitbucket Pipelines