|
|
|
|
|
|
by beckler
2470 days ago
|
|
|
Their scanning tools are "source available", but they're definitely not open-source. The license is gonna be a non-starter, but how they built their SAST tool [0] is actually quite interesting. It just uses existing open-source analysis tools, but orchestrates them all into a single tool by coordinating a bunch of docker images. [0] https://gitlab.com/gitlab-org/security-products/sast |
|
|