Kotlin 보안 정적 분석 툴

kotlin으로 웹 개발을 하지 거의 2년째가 되는데..
음 이제 슬슬 보안도 신경을 써야 하지 않나? 라는 생각에 
보안 정적 분석 툴을 찾아 보았다. 

초장기에는 kotlin 보안 정적 툴이 거의 없었는데 
이제는 intellij와 연동도 되고 gitlab에서도 연동이 되는 툴이 많아 졌다.
하이튼 Horusec, sonarqube 에 대해서 고민해봐도 될 것 같다.

Horusec
https://github.com/ZupIT/horusec

sonarqube
https://www.sonarqube.org/

===========================================================
Fortify  
https://www.microfocus.com/en-us/cyberres/application-security/static-code-analyzer

HCL AppScan on Cloud
https://cloud.appscan.com/

Insider CLI
https://github.com/insidersec/insider


Oversecured
https://oversecured.com/
==> 안드로이드 폰 용

SonarCloud
https://sonarcloud.io/about
==> 유료... 

[출처]
https://owasp.org/www-community/Source_Code_Analysis_Tools