Technique · Static analysis

Static application security testing

Finds injection, unsafe APIs, weak crypto and tainted data reaching a sink without running the code.

Sub-techniques

Pattern rules V1007.001

Syntax-aware patterns for dangerous calls and configurations (shell=True, yaml.load, disabled TLS verification).
Taint tracking V1007.002

Follow untrusted input from sources to sinks across functions and files.
Language security linters V1007.003

Per-language security rule sets maintained by each ecosystem.
Custom rule packs V1007.004

Rules for the framework and helpers your code uses, with tests for each rule.