code.mobsfscanmobsfscan mobile SAST
Runs mobsfscan (OWASP MASVS-oriented Semgrep rules bundled with the tool, no registry download) over Android (Java/Kotlin, manifests) and iOS (Swift/Objective-C) source. Only runs when mobile source is detected. Honors the project's .mobsf ignore rules (YAML data).
- Engine
- Wrapped scanner
- Wraps
mobsfscan- Targets
- Codebase
- Runs
- By default, when the target applies
- Network
- Only the target itself
Run only this auditor
bunx openaudit . --only code.mobsfscanWraps mobsfscan. When it isn't installed, the auditor is skipped with an install hint and the rest of the audit runs.