clj-holmes

clj-holmes is a command-line interface (CLI) static application security testing (SAST) tool designed to detect vulnerabilities in Clojure code by employing customizable rules through a straightforward pattern language. Its primary use case is to scan Clojure projects for security flaws, with capabilities to fetch rules from both public and private GitHub repositories. Notable features include scanning with specific rule tags, severities, and precision controls, as well as outputting results in multiple formats such as JSON or SARIF, making it suitable for integration into CI/CD workflows.