Semgrep
Fast static analysis with rules that look like code
Trivy
Scanner for vulnerabilities, misconfigurations and secrets
Snyk
Security platform for code, dependencies, containers and cloud configurations
OWASP Dependency-Check
Software composition analysis for known vulnerable dependencies
Bandit
Finds common security issues in Python code
Gitleaks
Detects secrets in git repositories and files