Bearer CLI scans source code and ranks flaws by sensitive data
Original title: Bearer CLI: Free, source-available code security scanning tool (SAST)
The free Elastic License 2.0 SAST tool covers seven languages and can emit a privacy report for GDPR records.
Bearer CLI is a free, source-available static scanner that reads code without running it and ranks findings on paths that touch sensitive data. Built-in rules cover the OWASP Top 10 and CWE Top 25, including SQL injection, cross-site scripting, path traversal, and hard-coded passwords. A privacy report identifies more than 120 data types and flags components that handle them, including databases and third-party APIs. Internal use needs no commercial license; hosting it for third parties requires approval.
- Supported languages are Go, Java, JavaScript, TypeScript, PHP, Python, and Ruby.
- Bearer says the scanner reads only code and never actual data values.
- The privacy report can flag databases such as pgSQL and APIs such as OpenAI and Sentry.
- The license is Elastic License 2.0.
- Vendors
- Bearer
- Products
- Bearer CLI
From the original article
1 min read at helpnetsecurity.com
Bearer CLI is a free static application security testing (SAST) tool that scans source code for vulnerabilities and prioritizes them by the sensitive data they touch. SAST means the tool reads code without running it. Organizations can use it freely, with a license restriction covered below.
By Anamarija Pogorelec · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.