Scanner integration overview
servasec automatically detects and parses output from 16 security scanners.
Supported scanners
| Scanner | Type | Formats | Auto-detect |
|---|---|---|---|
| Semgrep | SAST | JSON | Yes |
| Trivy | SCA / Container | JSON | Yes |
| Gitleaks | Secrets | JSON | Yes |
| Grype | SCA | JSON | Yes |
| Snyk | SCA | JSON | Yes |
| Checkov | IaC | JSON | Yes |
| TruffleHog | Secrets | JSON | Yes |
| Nuclei | DAST | JSON | Yes |
| Bandit | SAST | JSON | Yes |
| Gosec | SAST | JSON | Yes |
| Kube-bench | Kubernetes | JSON | Yes |
| Kubescape | Kubernetes | JSON | Yes |
| npm audit | SCA | JSON | Yes |
| OSV-Scanner | SCA | JSON | Yes |
| Tfsec | IaC | JSON | Yes |
| SARIF | Universal | SARIF | Yes (tool name detection) |