Static analysis secrets scanning

AppScan on Cloud supports scanning of secrets for the following platforms and providers:

  • Alibaba Cloud
  • Amazon Web Services (AWS)
  • Atlassian
  • Azure
  • Databricks
  • GitHub
  • Google Cloud
  • OpenAI
  • Stripe
  • mongodb
  • Jenkins
Note: In addition to the platforms and providers listed, our engine also checks for hardcoded passwords, credit card numbers, and Social Security numbers (SSN) when those secrets are detected in the code being scanned.

Secrets scanning is disabled by default. To enable secrets scanning, use the options -es, --enableSecrets or -so, --secretsOnly with appscan prepare or prepare.