Mind maps / Code Reviews
Code Reviews mind map
A mind map of secure code review standards, checklists and tools. Free to use and share. Open the image at full size, or print it at A3.
Reference
Links from the map
These are the sources and tools referenced in the Code Reviews mind map. Links marked offline pointed to projects that have since shut down or moved, so they are kept as text only.
| CERT Coding Standards | cmu-sei.github.io/secure-coding-standards |
|---|---|
| OWASP Code Review Guide | owasp.org/index.php/Category:OWASP_Code_Review_Projectoffline |
| Agnitio | sourceforge.net/projects/agnitiotool |
| CERT Rosecheckers | sourceforge.net/projects/rosecheckers |
| Yasca | scovetta.github.io/yasca |
| VCG | sourceforge.net/projects/visualcodegrepp |
| phpcs-security-audit | github.com/FloeDesignTechnologies/phpcs-security-audit |
| RIPS | sourceforge.net/projects/rips-scanner |
| Flawfinder | dwheeler.com/flawfinder |
| Dawn | github.com/thesp0nge/dawnscanner |
| Brakeman | brakemanscanner.org |