📡
Daniel Serbu's CyberSecurity Blog
  • 🔧Welcome
  • 💾Writeups
    • PWNEDLABS Identify the AWS Account ID from a Public S3 Bucket
    • TryHackMe Anthem
    • TryHackMe AttacktiveDirectory
    • TryHackMe Vulnnet: Active
    • TryHackMe Ice
    • TryHackMe Blueprint
    • TryHackMe VulnNet: Roasted
    • TryHackMe Post-Exploitation Basics
    • TryHackMe Lookback
    • MobileHackingLab Food Store
    • MobileHackingLab Notekeeper
    • MobileHackingLab IOT Connect
  • DevSecOps
    • Container Security
      • Kubernetes
    • Infrastructure as Code - IaC
    • Dynamic Application Security Testing - DAST
    • Static Application Security Testing - SAST
    • Software Bill of Materials - SBOM
    • Software Composition Analysis - SCA
    • Source Code Audit
      • PHP Code Review
      • Secure By Design Libraries
    • IDE Plugins for Developers
    • Security Hardening
    • Secure Coding
    • Cheatsheets
    • Mobile
    • Cloud Security
  • OSINT
Powered by GitBook
On this page
  1. DevSecOps
  2. Source Code Audit

PHP Code Review

Tools

LogoAbout
LogoGitHub - phpstan/phpstan: PHP Static Analysis Tool - discover bugs in your code without running it!GitHub
LogoGitHub - vimeo/psalm: A static analysis tool for finding errors in PHP applicationsGitHub
LogoGitHub - sebastianbergmann/php-code-coverage: Library that provides collection, processing, and rendering functionality for PHP code coverage information.GitHub
LogoSonarQube Free & Open Source Community EditionSonarSource

Other references

LogoPHP Code Review Checklist | TCGTCG
LogoPHP static code analysissonarsource
LogoInsecure Use of Dangerous Function | GuardRails
PreviousSource Code AuditNextSecure By Design Libraries

Last updated 3 months ago