Checkmarx

An enterprise SAST engine with broad language coverage that builds a queryable code graph and traces tainted data from source to sink.

An open-source scanner from Checkmarx that parses many infrastructure formats into a common model and evaluates Rego queries against it.