Live Webinar: Using open source safely and effectively. Wed, Dec 15th @ 9am PT. Register now. Company Login Open Source Projects ShiftLeft Sponsored Open Source Resources At ShiftLeft, we believe strongly in the power of the open source community. PROJECT Gaum Gaum is a flexible open source library to talk to Postgres. While in some ways like an Object-relational mapping (O/RM), it differs in several key ways. View Project PROJECT HelloShiftLeft HelloShiftLeft is a demo application built on the Spring Framework to provide a real world representation of a REST service that uses a mix of convention and configuration and simulates a common set of vulnerabilities found in code. The tool also exposes a series of endpoints and APIs for queries and simulating exploits. View Project PROJECT Joern Joern the genesis of the ShiftLeft Code Property Graph (CPG) analyzes a code base using a robust parser for C/C++ and represents the entire code base into a single property graph stored in a Neo4J graph database. This allows code to be mined using complex queries formulated in the graph traversal languages. View Project PROJECT OpenSSF The Open Source Security Foundation (OpenSSF) is a cross-industry collaboration that brings together technology leaders to improve the security of OSS. ShiftLeft joins OpenSSF to further its commitment to advance supply chain security for open source software and the entire technology and business ecosystem. View Project PROJECT OverflowDB OverflowDB is the graph database that powers ShiftLeft's analytics pipeline. It comes with a schema DSL, codegenerator, and sbt-plugin so it can be used in different domains. It has a very low memory footprint and can overflow to disk when running low on memory. View Project PROJECT sbt-ci-release-early Sbt-ci-release-early is an open source plugin for fully automated releases, without SNAPSHOT and git sha's in the version. Sbt represents a remix of the best ideas from sbt-ci-release and sbt-release-early. Sbt detects the last version from git (e.g. v1.0.0) and increments the last digit, i.e. the next release is automatically inferred as v1.0.1 View Project PROJECT The Code Property Graph (CPG) Schema The Code Property Graph Schema is an open standard for language-agnostic representation of program code designed for incremental and distributed code analysis. The CPG schema is made available to foster an open standard for the exchange of code in intermediate representations along with analysis results. The standard consists of a minimal base schema that can be augmented via extension schemas to enable storage of application-specific data. View Project PROJECT TinkerGraph We’ve contributed a fork of the that uses 70% less memory and implements strict schema validation. View Project PROJECT TraceLeft TraceLeft is a library to trace applications as well as a small CLI tool (traceleft) which acts as a reference implementation of the framework. It uses Linux and to install probes on Linux function calls (both APIs and other internal functions) in order to receive callbacks for syscalls, file and network events of a traced process. View Project Ready to secure code at scale? Get Free Account Share your email to get the latest ShiftLeft updates, resources, and more. Enter your email address submit newsletter Platform Overview Next Gen Static Analysis Intelligent SCA ShiftLeft Educate ShiftLeft Ocular ShiftLeft Illuminate Pricing Why ShiftLeft How it Works Our Technology See It For Yourself Learn Resource Hub Blog Community & Training Open Source Resources Documentation Company About Us Press & News Careers Contact Us Twitter LinkedIn Discord Github Status Privacy & Security Terms of Use Cookie Policy © 2016 - 2021 ShiftLeft Inc. All rights reserved.