Tobias Zimmergren • 9/8/2020

Use the Microsoft Application Inspector to analyze your source code

This article explains how to use Microsoft Application Inspector, a source code characterization tool, to inventory features like authentication, authorization, cryptographic algorithms, frameworks, cloud APIs, and PII in codebases. It contrasts the tool with traditional SAST tools by focusing on discovery without vulnerability judgment. The article covers supported languages (C, C++, C#, Java, JavaScript, etc.), running the tool manually or in CI/CD pipelines via GitHub Actions or Azure DevOps, and provides steps to get started with binaries from GitHub Releases.

0 comments

#static analysis #Source Code Analysis #Microsoft Application Inspector