code.securityStatic security analysis
Heuristic SAST for JS/TS, Python, Go, PHP, Ruby, Java and C#: injection, XSS, weak crypto, disabled TLS/JWT verification, permissive CORS, insecure deserialization, open redirects and path traversal.
- Engine
- Built-in
- Targets
- Codebase
- Areas
- Security
- Runs
- By default, when the target applies
- Network
- Only the target itself
Run only this auditor
bunx openaudit . --only code.securityBuilt into openaudit; nothing to install.