sharang/compliance-scanner-agent
1
0
Fork 0
Code Issues 64 Pull Requests 1 Actions Packages Projects Releases 1 Wiki Activity

docs: rebrand Certifai → Prüfwerk (user-facing name) (#243)
CI / Check (push) Skipped
Details
CI / Detect Changes (push) Successful in 3s
Details
CI / Deploy Agent (push) Skipped
Details
CI / Deploy Dashboard (push) Skipped
Details
CI / Deploy MCP (push) Skipped
Details
CI / Deploy Docs (push) Successful in 1m13s
Details

Browse Source
This commit was merged in pull request #243.
This commit is contained in:
sharang
2026-09-02 08:00:12 +00:00
parent e0c54c4659
commit 710fdcab6f
15 changed files with 59 additions and 59 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/reference/tools.md
+4 -4
View File
@@ -1,12 +1,12 @@
# Tools & Scanners
Certifai uses a combination of open-source scanners and AI-powered analysis to provide comprehensive security coverage. This page describes each tool and how it contributes to the scan pipeline.
Prüfwerk uses a combination of open-source scanners and AI-powered analysis to provide comprehensive security coverage. This page describes each tool and how it contributes to the scan pipeline.
## Semgrep -- Static Analysis (SAST)
[Semgrep](https://semgrep.dev/) is an open-source static analysis tool that finds vulnerabilities by matching patterns in source code. It supports many languages and has an extensive rule library.
Certifai runs Semgrep with rules covering:
Prüfwerk runs Semgrep with rules covering:
- **OWASP Top 10** -- injection, broken authentication, XSS, insecure deserialization, and more
- **General security** -- insecure cryptography, hardcoded credentials, path traversal
@@ -26,7 +26,7 @@ Syft output feeds into both the SBOM feature and the vulnerability scanning pipe
## OSV.dev + NVD -- Vulnerability Matching
Certifai matches every SBOM component directly against two public vulnerability sources (no separate scanner binary):
Prüfwerk matches every SBOM component directly against two public vulnerability sources (no separate scanner binary):
- [OSV.dev](https://osv.dev/) -- batch queried by package URL (purl) for ecosystem advisories (npm, PyPI, crates.io, Go, Maven, ...)
- [NVD](https://nvd.nist.gov/) -- queried per CVE for the CVSS v3.1 base score, and by CPE for CODESYS runtime versions found in PLC projects
@@ -63,7 +63,7 @@ Detects hardcoded secrets and credentials in source code:
## LLM-Powered Code Review
Beyond rule-based scanning, Certifai uses an LLM to perform architectural and security code review. The AI reviews code patterns that are too nuanced for static rules, such as:
Beyond rule-based scanning, Prüfwerk uses an LLM to perform architectural and security code review. The AI reviews code patterns that are too nuanced for static rules, such as:
- Business logic flaws
- Race conditions