# Sec1

## user-docs

- [Sec1 Documentation](https://docs.sec1.io/user-docs/readme.md)
- [Quick Start](https://docs.sec1.io/user-docs/1-quick-start.md)
- [Login to Sec1](https://docs.sec1.io/user-docs/1-quick-start/1-login-to-sec1.md)
- [Your First Scan](https://docs.sec1.io/user-docs/1-quick-start/2-your-first-scan.md)
- [View Results](https://docs.sec1.io/user-docs/1-quick-start/3-view-results.md)
- [SIEM + EDR/XDR](https://docs.sec1.io/user-docs/10-siem-edr-xdr.md)
- [Application Control](https://docs.sec1.io/user-docs/10-siem-edr-xdr/application-control.md)
- [Architecture](https://docs.sec1.io/user-docs/10-siem-edr-xdr/architecture.md)
- [Data Collection](https://docs.sec1.io/user-docs/10-siem-edr-xdr/data-collection.md)
- [Detections, Alerts & Incidents](https://docs.sec1.io/user-docs/10-siem-edr-xdr/detections-alerts-incidents.md)
- [Device Control](https://docs.sec1.io/user-docs/10-siem-edr-xdr/device-control.md)
- [Endpoints & Telemetry](https://docs.sec1.io/user-docs/10-siem-edr-xdr/endpoints-and-telemetry.md)
- [Install the Agent](https://docs.sec1.io/user-docs/10-siem-edr-xdr/install-the-agent.md)
- [Overview](https://docs.sec1.io/user-docs/10-siem-edr-xdr/overview.md)
- [Response Actions](https://docs.sec1.io/user-docs/10-siem-edr-xdr/response-actions.md)
- [Setup & Access](https://docs.sec1.io/user-docs/10-siem-edr-xdr/setup-and-access.md)
- [Vulnerability Management](https://docs.sec1.io/user-docs/10-siem-edr-xdr/vulnerability-management.md)
- [CSPM (Cloud Security Posture Management)](https://docs.sec1.io/user-docs/11-cspm.md)
- [CSPM Prerequisites](https://docs.sec1.io/user-docs/11-cspm/1-prerequisites.md): Read-only access model, network reachability, identity, supported providers, and SaaS vs hybrid/on-prem assumptions to prepare before connecting a cloud account to Sec1 CSPM.
- [CSPM Required Permissions](https://docs.sec1.io/user-docs/11-cspm/2-permissions.md): Copy-pasteable read-only role lists for connecting GCP, Azure, AWS, and Kubernetes (GKE / EKS / AKS) to Sec1 CSPM.
- [Onboarding & Your First Scan](https://docs.sec1.io/user-docs/11-cspm/3-onboarding.md): Step-by-step guide to adding a cloud account to Sec1 CSPM, testing the connection, running your first scan, and reviewing assets, findings, compliance, and attack paths in the Sec1 console.
- [Frameworks, Coverage & FAQ](https://docs.sec1.io/user-docs/11-cspm/4-frameworks-and-coverage.md): Compliance frameworks supported by Sec1 CSPM, what gets scanned, reporting and exports, and frequently asked questions on data handling, read-only assurance, and scan cadence.
- [Integration with Sec1](https://docs.sec1.io/user-docs/2-integration-with-sec1.md)
- [Registration & Login](https://docs.sec1.io/user-docs/2-integration-with-sec1/1-registration-login.md)
- [Login with GITHub](https://docs.sec1.io/user-docs/2-integration-with-sec1/1-registration-login/1-login-with-github.md)
- [New Registration](https://docs.sec1.io/user-docs/2-integration-with-sec1/1-registration-login/2-new-registration.md)
- [Forgot Password](https://docs.sec1.io/user-docs/2-integration-with-sec1/1-registration-login/3-forgot-password.md)
- [Team Administration](https://docs.sec1.io/user-docs/2-integration-with-sec1/1-registration-login/4-team-administration.md)
- [Scan](https://docs.sec1.io/user-docs/2-integration-with-sec1/2-scan.md)
- [Dashboard](https://docs.sec1.io/user-docs/2-integration-with-sec1/3-dashboard.md)
- [Auto Fix](https://docs.sec1.io/user-docs/2-integration-with-sec1/4-auto-fix.md)
- [Integration with Sec1 CLI](https://docs.sec1.io/user-docs/2-integration-with-sec1/5-integration-with-cli.md)
- [Sec1 CLI (Command Line Interface) Overview](https://docs.sec1.io/user-docs/2-integration-with-sec1/5-integration-with-cli/commands.md)
- [Config](https://docs.sec1.io/user-docs/2-integration-with-sec1/5-integration-with-cli/commands/config.md)
- [Scan](https://docs.sec1.io/user-docs/2-integration-with-sec1/5-integration-with-cli/commands/scan.md)
- [Search](https://docs.sec1.io/user-docs/2-integration-with-sec1/5-integration-with-cli/commands/search.md)
- [Integration with CI/CD](https://docs.sec1.io/user-docs/2-integration-with-sec1/6-ci-cd-integrations.md)
- [Jenkins Integration](https://docs.sec1.io/user-docs/2-integration-with-sec1/6-ci-cd-integrations/1-jenkins-plugin-integration.md)
- [Github Actions](https://docs.sec1.io/user-docs/2-integration-with-sec1/6-ci-cd-integrations/2-github-actions-integration.md)
- [Azure DevOps Extension for Sec1 Security](https://docs.sec1.io/user-docs/2-integration-with-sec1/6-ci-cd-integrations/3-azure-devops-extension.md)
- [Azure DevOps Extension for Sec1 Container Image Scanner](https://docs.sec1.io/user-docs/2-integration-with-sec1/6-ci-cd-integrations/4-azure-devops-container-extension.md)
- [GCP Code Build](https://docs.sec1.io/user-docs/2-integration-with-sec1/6-ci-cd-integrations/5-gcp-code-build-integration.md)
- [Gitlab CI/CD Component](https://docs.sec1.io/user-docs/2-integration-with-sec1/6-ci-cd-integrations/6-gitlab-cicd-integration.md)
- [Integration with CircleCI Using the Sec1 Orb](https://docs.sec1.io/user-docs/2-integration-with-sec1/6-ci-cd-integrations/7-circleci-orb-integration.md)
- [Teamcity Plugin](https://docs.sec1.io/user-docs/2-integration-with-sec1/6-ci-cd-integrations/8-teamcity-plugin-integration.md)
- [How to Get Your API Key](https://docs.sec1.io/user-docs/2-integration-with-sec1/7-get-sec1-api-key.md)
- [External Integrations](https://docs.sec1.io/user-docs/3-integrations.md)
- [GITHub Integration](https://docs.sec1.io/user-docs/3-integrations/1-github.md)
- [Azure SCM Integration](https://docs.sec1.io/user-docs/3-integrations/2-azure-scm.md)
- [Notifications](https://docs.sec1.io/user-docs/3-integrations/3-notifications.md)
- [Generate Sec1 API Token](https://docs.sec1.io/user-docs/3-integrations/4-sec1-api-token.md)
- [Static Application Security Testing](https://docs.sec1.io/user-docs/4-sast.md)
- [SAST Java Rules](https://docs.sec1.io/user-docs/4-sast/2-java.md)
- [GIT Leaks](https://docs.sec1.io/user-docs/4-sast/2-java/gitleaks.md)
- [Leakage of Information in Logger Message](https://docs.sec1.io/user-docs/4-sast/2-java/leakage-of-information-in-logger-message.md)
- [Leakage of sensitive data in cookie](https://docs.sec1.io/user-docs/4-sast/2-java/leakage-of-sensitive-data-in-cookie.md)
- [Leakage of sensitive data in exception message](https://docs.sec1.io/user-docs/4-sast/2-java/leakage-of-sensitive-data-in-exception-message.md)
- [Leakage of sensitive data to Airbrake](https://docs.sec1.io/user-docs/4-sast/2-java/leakage-of-sensitive-data-to-airbrake.md)
- [Leakage of sensitive data to Algolia](https://docs.sec1.io/user-docs/4-sast/2-java/leakage-of-sensitive-data-to-algolia.md)
- [Leakage of Sensitive Data to Bugsnag](https://docs.sec1.io/user-docs/4-sast/2-java/leakage-of-sensitive-data-to-bugsnag.md)
- [Leakage of Sensitive Data to ClickHouse](https://docs.sec1.io/user-docs/4-sast/2-java/leakage-of-sensitive-data-to-clickhouse.md)
- [Leakage of Sensitive Data to Datadog](https://docs.sec1.io/user-docs/4-sast/2-java/leakage-of-sensitive-data-to-datadog.md)
- [Leakage of Sensitive Data to ElasticSearch](https://docs.sec1.io/user-docs/4-sast/2-java/leakage-of-sensitive-data-to-elasticsearch.md)
- [Leakage of Sensitive Data to New Relic](https://docs.sec1.io/user-docs/4-sast/2-java/leakage-of-sensitive-data-to-new-relic.md)
- [Leakage of Sensitive Data to OpenTelemetry](https://docs.sec1.io/user-docs/4-sast/2-java/leakage-of-sensitive-data-to-open-telemetry.md)
- [Leakage of Sensitive Data to RollBar](https://docs.sec1.io/user-docs/4-sast/2-java/leakage-of-sensitive-data-to-rollbar.md)
- [Leakage of Sensitive Data to Sentry](https://docs.sec1.io/user-docs/4-sast/2-java/leakage-of-sensitive-data-to-sentry.md)
- [Leakage of Sensitive Information in Exception Messages](https://docs.sec1.io/user-docs/4-sast/2-java/leakage-of-sensitive-information-in-exception-messages.md)
- [Leakage of sensitive information in logger message](https://docs.sec1.io/user-docs/4-sast/2-java/leakage-of-sensitive-information-in-logger-message.md)
- [Missing authentication for database](https://docs.sec1.io/user-docs/4-sast/2-java/missing-authentication-for-database.md)
- [Missing database password detected](https://docs.sec1.io/user-docs/4-sast/2-java/missing-database-password-detected.md)
- [Missing HTTP Only Option in Cookie Configuration](https://docs.sec1.io/user-docs/4-sast/2-java/missing-http-only-option-in-cookie-configuration.md)
- [Missing Optimal Asymmetric Encryption Padding (OAEP)](https://docs.sec1.io/user-docs/4-sast/2-java/missing-optimal-asymmetric-encryption-padding.md)
- [Missing or Permissive SSL Hostname Verifier](https://docs.sec1.io/user-docs/4-sast/2-java/missing-or-permissive-ssl-hostname-verifier.md)
- [Missing Protection against Session Fixation Attacks](https://docs.sec1.io/user-docs/4-sast/2-java/missing-protection-against-session-fixation-attacks.md)
- [Missing Secure option in cookie configuration](https://docs.sec1.io/user-docs/4-sast/2-java/missing-secure-option-in-cookie-configuration.md)
- [Missing signature verification of JWT](https://docs.sec1.io/user-docs/4-sast/2-java/missing-signature-verification-of-jwt.md)
- [Missing SSL host check in SMTP](https://docs.sec1.io/user-docs/4-sast/2-java/missing-ssl-host-check-in-smtp.md)
- [Missing Support for Integrity Check](https://docs.sec1.io/user-docs/4-sast/2-java/missing-support-for-integrity-check.md)
- [Missing TLS validation](https://docs.sec1.io/user-docs/4-sast/2-java/missing-tls-validation.md)
- [Observable Timing Discrepancy](https://docs.sec1.io/user-docs/4-sast/2-java/observable-timing-discrepancy.md)
- [Permissive Access-Control-Allow-Origin configuration](https://docs.sec1.io/user-docs/4-sast/2-java/permissive-access-control-allow-origin-configuration.md)
- [Permissive context mode for resources](https://docs.sec1.io/user-docs/4-sast/2-java/permissive-context-mode-for-resources.md)
- [Permissive cookie configuration](https://docs.sec1.io/user-docs/4-sast/2-java/permissive-cookie-configuration.md)
- [Permissive HTTP Only option in cookie configuration](https://docs.sec1.io/user-docs/4-sast/2-java/permissive-http-only-option-in-cookie-configuration.md)
- [Permissive Screenshot option set](https://docs.sec1.io/user-docs/4-sast/2-java/permissive-screenshot-option-set.md)
- [Possible CLRF injection detected](https://docs.sec1.io/user-docs/4-sast/2-java/possible-clrf-injection-detected.md)
- [Possible expression language (EL) injection detected](https://docs.sec1.io/user-docs/4-sast/2-java/possible-expression-language-el-injection-detected.md)
- [Possible HTTP Parameter Pollution detected](https://docs.sec1.io/user-docs/4-sast/2-java/possible-http-parameter-pollution-detected.md)
- [Unsanitized external input in SQL query](https://docs.sec1.io/user-docs/4-sast/2-java/unsanitized-external-input-in-sql-query.md)
- [Unsanitized use of FileUpload filename](https://docs.sec1.io/user-docs/4-sast/2-java/unsanitized-use-of-fileupload-filename.md)
- [Unsanitized user input in 'eval' type function](https://docs.sec1.io/user-docs/4-sast/2-java/unsanitized-user-input-in-eval-type-function.md)
- [Unsanitized user input in Access-Control-Allow-Origin](https://docs.sec1.io/user-docs/4-sast/2-java/unsanitized-user-input-in-access-control-allow-origin.md)
- [Unsanitized user input in AWS query](https://docs.sec1.io/user-docs/4-sast/2-java/unsanitized-user-input-in-aws-query.md)
- [Unsanitized user input in code generation](https://docs.sec1.io/user-docs/4-sast/2-java/unsanitized-user-input-in-code-generation.md)
- [Unsanitized user input in deserialization method](https://docs.sec1.io/user-docs/4-sast/2-java/unsanitized-user-input-in-deserialization-method.md)
- [Unsanitized User Input in File Path Traversal](https://docs.sec1.io/user-docs/4-sast/2-java/unsanitized-user-input-in-file-path-traversal.md)
- [Unsanitized User Input in File Path](https://docs.sec1.io/user-docs/4-sast/2-java/unsanitized-user-input-in-file-path.md)
- [Unsanitized user input in format string detected](https://docs.sec1.io/user-docs/4-sast/2-java/unsanitized-user-input-in-format-string-detected.md)
- [Unsanitized user input in HTTP request (SSRF)](https://docs.sec1.io/user-docs/4-sast/2-java/unsanitized-user-input-in-http-request-ssrf.md)
- [Unsanitized user input in HTTP response (XSS)](https://docs.sec1.io/user-docs/4-sast/2-java/unsanitized-user-input-in-http-response-xss.md)
- [Unsanitized user input in LDAP request](https://docs.sec1.io/user-docs/4-sast/2-java/unsanitized-user-input-in-ldap-request.md)
- [Unsanitized user input in logger message](https://docs.sec1.io/user-docs/4-sast/2-java/unsanitized-user-input-in-logger-message.md)
- [Unsanitized User Input in OS Command](https://docs.sec1.io/user-docs/4-sast/2-java/unsanitized-user-input-in-os-command.md)
- [Unsanitized User Input in Output Stream (XSS)](https://docs.sec1.io/user-docs/4-sast/2-java/unsanitized-user-input-in-output-stream.md)
- [Unsanitized User input in Redirect](https://docs.sec1.io/user-docs/4-sast/2-java/unsanitized-user-input-in-redirect.md)
- [Unsanitized User Input in Regular Expression](https://docs.sec1.io/user-docs/4-sast/2-java/unsanitized-user-input-in-regular-expression.md)
- [Unsanitized user input in SQL catalog configuration](https://docs.sec1.io/user-docs/4-sast/2-java/unsanitized-user-input-in-sql-catalog-configuration.md)
- [Unsanitized user input in XML External Entity](https://docs.sec1.io/user-docs/4-sast/2-java/unsanitized-user-input-in-xml-external-entity.md)
- [Unsanitized User Input in XPath](https://docs.sec1.io/user-docs/4-sast/2-java/unsanitized-user-input-in-xpath.md)
- [Usage of bad hex conversion on digest array](https://docs.sec1.io/user-docs/4-sast/2-java/usage-of-bad-hex-conversion-on-digest-array.md)
- [Usage of CBC (Cipher Block Chaining) Mode with Padding](https://docs.sec1.io/user-docs/4-sast/2-java/usage-of-cbc-mode-with-padding.md)
- [Usage of custom Digest class](https://docs.sec1.io/user-docs/4-sast/2-java/usage-of-custom-digest-class.md)
- [Usage of dangerous permissions](https://docs.sec1.io/user-docs/4-sast/2-java/usage-of-dangerous-permissions.md)
- [Usage of ECB Cipher Mode](https://docs.sec1.io/user-docs/4-sast/2-java/usage-of-ecb-cipher-mode.md)
- [Usage of External Input in Code Reflection](https://docs.sec1.io/user-docs/4-sast/2-java/usage-of-external-input-in-code-reflection.md)
- [Usage of hard-coded database password](https://docs.sec1.io/user-docs/4-sast/2-java/usage-of-hard-coded-database-password.md)
- [Usage of hard-coded secret](https://docs.sec1.io/user-docs/4-sast/2-java/usage-of-hard-coded-secret.md)
- [Usage of insufficient random value](https://docs.sec1.io/user-docs/4-sast/2-java/usage-of-insufficient-random-value.md)
- [Usage of naive Socket class to create SSL Socket](https://docs.sec1.io/user-docs/4-sast/2-java/usage-of-naive-socket-class-to-create-ssl-socket.md)
- [Usage of permissive file permission ('other')](https://docs.sec1.io/user-docs/4-sast/2-java/usage-of-permissive-file-permission-other.md)
- [Usage of small key size with Blowfish encryption](https://docs.sec1.io/user-docs/4-sast/2-java/usage-of-small-key-size-with-blowfish-encryption.md)
- [Usage of Trusted and Untrusted Data inside the same Data Structure](https://docs.sec1.io/user-docs/4-sast/2-java/usage-of-trusted-and-untrusted-data-inside-the-same-data-structure.md)
- [Usage of vulnerable Apache Commons Collections InvokeTransformer class](https://docs.sec1.io/user-docs/4-sast/2-java/usage-of-vulnerable-apache-commons-collections-invoketransformer-class.md)
- [Usage of weak encryption algorithm (DES)](https://docs.sec1.io/user-docs/4-sast/2-java/usage-of-weak-encryption-algorithm.md)
- [Usage of Weak Hashing Library on a Password (SHA-1)](https://docs.sec1.io/user-docs/4-sast/2-java/usage-of-weak-hashing-library-on-a-password.md)
- [Usage of Weak Hashing library (MD5)](https://docs.sec1.io/user-docs/4-sast/2-java/usage-of-weak-hashing-library.md)
- [SAST JavaScript Rules](https://docs.sec1.io/user-docs/4-sast/3-javascript.md)
- [Leakage of hard-coded secret in JWT](https://docs.sec1.io/user-docs/4-sast/3-javascript/leakage-of-hard-coded-secret-in-jwt.md)
- [Leakage of information in logger message](https://docs.sec1.io/user-docs/4-sast/3-javascript/leakage-of-information-in-logger-message.md)
- [Leakage of sensitive data in dynamic file generation](https://docs.sec1.io/user-docs/4-sast/3-javascript/leakage-of-sensitive-data-in-dynamic-file-generation.md)
- [Leakage of sensitive data in exception message](https://docs.sec1.io/user-docs/4-sast/3-javascript/leakage-of-sensitive-data-in-exception-message.md)
- [Leakage of sensitive data in JWT](https://docs.sec1.io/user-docs/4-sast/3-javascript/leakage-of-sensitive-data-in-jwt.md)
- [Leakage of sensitive data in local storage](https://docs.sec1.io/user-docs/4-sast/3-javascript/leakage-of-sensitive-data-in-local-storage.md)
- [Leakage of sensitive data to Airbrake](https://docs.sec1.io/user-docs/4-sast/3-javascript/leakage-of-sensitive-data-to-airbrake.md)
- [Leakage of sensitive data to Algolia](https://docs.sec1.io/user-docs/4-sast/3-javascript/leakage-of-sensitive-data-to-algolia.md)
- [Leakage of sensitive data to Bugsnag](https://docs.sec1.io/user-docs/4-sast/3-javascript/leakage-of-sensitive-data-to-bugsnag.md)
- [Leakage of sensitive data to Datadog RUM](https://docs.sec1.io/user-docs/4-sast/3-javascript/leakage-of-sensitive-data-to-datadog-rum-browser.md)
- [Leakage of sensitive data to Datadog](https://docs.sec1.io/user-docs/4-sast/3-javascript/leakage-of-sensitive-data-to-datadog.md)
- [Leakage of sensitive data to ElasticSearch](https://docs.sec1.io/user-docs/4-sast/3-javascript/leakage-of-sensitive-data-to-elasticsearch.md)
- [Leakage of sensitive data to Google Analytics (React)](https://docs.sec1.io/user-docs/4-sast/3-javascript/leakage-of-sensitive-data-to-google-analytics-react.md)
- [Leakage of sensitive data to Google Analytics](https://docs.sec1.io/user-docs/4-sast/3-javascript/leakage-of-sensitive-data-to-google-analytics.md)
- [Leakage of sensitive data to Google Tag Manager](https://docs.sec1.io/user-docs/4-sast/3-javascript/leakage-of-sensitive-data-to-google-tag-manager.md)
- [Leakage of sensitive data to HoneyBadger](https://docs.sec1.io/user-docs/4-sast/3-javascript/leakage-of-sensitive-data-to-honeybadger.md)
- [Leakage of sensitive data to New Relic](https://docs.sec1.io/user-docs/4-sast/3-javascript/leakage-of-sensitive-data-to-new-relic.md)
- [Leakage of sensitive data to OpenTelemetry](https://docs.sec1.io/user-docs/4-sast/3-javascript/leakage-of-sensitive-data-to-open-telemetry.md)
- [Leakage of sensitive data to OpenAI](https://docs.sec1.io/user-docs/4-sast/3-javascript/leakage-of-sensitive-data-to-openai.md)
- [Leakage of sensitive data to RollBar](https://docs.sec1.io/user-docs/4-sast/3-javascript/leakage-of-sensitive-data-to-rollbar.md)
- [Leakage of sensitive data to Segment](https://docs.sec1.io/user-docs/4-sast/3-javascript/leakage-of-sensitive-data-to-segment.md)
- [Leakage of sensitive data to Sentry](https://docs.sec1.io/user-docs/4-sast/3-javascript/leakage-of-sensitive-data-to-sentry.md)
- [Leakage of sensitive information in logger message](https://docs.sec1.io/user-docs/4-sast/3-javascript/leakage-of-sensitive-information-in-logger-message.md)
- [Missing Access Restriction on Directory Listing](https://docs.sec1.io/user-docs/4-sast/3-javascript/missing-access-restriction-on-directory-listing.md)
- [Missing escape of HTML entities in Handlebars template compilation](https://docs.sec1.io/user-docs/4-sast/3-javascript/missing-escape-of-html-entities-in-handlebars-template-compilation.md)
- [Missing Helmet configuration on HTTP headers](https://docs.sec1.io/user-docs/4-sast/3-javascript/missing-helmet-configuration-on-http-headers.md)
- [Leakage of Sensitive Information in Exception Messages](https://docs.sec1.io/user-docs/4-sast/3-javascript/missing-http-only-option-in-cookie-configuration.md)
- [Missing origin check in message handler](https://docs.sec1.io/user-docs/4-sast/3-javascript/missing-origin-check-in-message-handler.md)
- [Missing Revoke Method on JWT](https://docs.sec1.io/user-docs/4-sast/3-javascript/missing-revoke-method-on-jwt.md)
- [Missing Secure HTTP server Configuration](https://docs.sec1.io/user-docs/4-sast/3-javascript/missing-secure-http-server-configuration.md)
- [Missing Secure option in Cookie Configuration](https://docs.sec1.io/user-docs/4-sast/3-javascript/missing-secure-option-in-cookie-configuration.md)
- [Missing Server Configuration to reduce Server Fingerprinting](https://docs.sec1.io/user-docs/4-sast/3-javascript/missing-server-configuration-to-reduce-server-fingerprinting.md)
- [Missing TLS validation](https://docs.sec1.io/user-docs/4-sast/3-javascript/missing-tls-validation.md)
- [Observable Timing Discrepancy](https://docs.sec1.io/user-docs/4-sast/3-javascript/observable-timing-discrepancy.md)
- [Permissive file assignment](https://docs.sec1.io/user-docs/4-sast/3-javascript/permissive-file-assignment.md)
- [Permissive origin in postMessage](https://docs.sec1.io/user-docs/4-sast/3-javascript/permissive-origin-in-postmessage.md)
- [Unsanitized dynamic input in file path traversal](https://docs.sec1.io/user-docs/4-sast/3-javascript/unsanitized-dynamic-input-in-file-path-traversal.md)
- [Unsanitized dynamic input in file path](https://docs.sec1.io/user-docs/4-sast/3-javascript/unsanitized-dynamic-input-in-file-path.md)
- [Unsanitized Dynamic input in OS Command](https://docs.sec1.io/user-docs/4-sast/3-javascript/unsanitized-dynamic-input-in-os-command.md)
- [Unsanitized dynamic input in regular expression](https://docs.sec1.io/user-docs/4-sast/3-javascript/unsanitized-dynamic-input-in-regular-expression.md)
- [Unsanitized input in NoSQL query](https://docs.sec1.io/user-docs/4-sast/3-javascript/unsanitized-input-in-nosql-query.md)
- [Unsanitized user input in 'eval' type function](https://docs.sec1.io/user-docs/4-sast/3-javascript/unsanitized-user-input-in-eval-type-function.md)
- [Unsanitized user input in React inner HTML method (XSS)](https://docs.sec1.io/user-docs/4-sast/3-javascript/unsanitized-user-input-in-react-inner-html-method-xss.md)
- [Unsanitized user input in Access-Control-Allow-Origin](https://docs.sec1.io/user-docs/4-sast/3-javascript/unsanitized-user-input-in-access-control-allow-origin.md)
- [Unsanitized user input in deserialization method](https://docs.sec1.io/user-docs/4-sast/3-javascript/unsanitized-user-input-in-deserialization-method-lang.md)
- [Unsanitized user input in deserialization method](https://docs.sec1.io/user-docs/4-sast/3-javascript/unsanitized-user-input-in-deserialization-method.md)
- [Unsanitized user input in dynamic HTML insertion (XSS)](https://docs.sec1.io/user-docs/4-sast/3-javascript/unsanitized-user-input-in-dynamic-http-insertion-xss.md)
- [Unsanitized user input in DynamoDB query](https://docs.sec1.io/user-docs/4-sast/3-javascript/unsanitized-user-input-in-dynamodb-query.md)
- [Unsanitized User Input in File Path Traversal](https://docs.sec1.io/user-docs/4-sast/3-javascript/unsanitized-user-input-in-file-path-traversal.md)
- [Unsanitized user input in format string](https://docs.sec1.io/user-docs/4-sast/3-javascript/unsanitized-user-input-in-format-string.md)
- [Unsanitized user input in HTTP request (SSRF)](https://docs.sec1.io/user-docs/4-sast/3-javascript/unsanitized-user-input-in-http-request-ssrf.md)
- [Unsanitized user input in HTTP request (SSRF)](https://docs.sec1.io/user-docs/4-sast/3-javascript/unsanitized-user-input-in-http-request-ssrf-lang.md)
- [Unsanitized user input in HTTP response (XSS)](https://docs.sec1.io/user-docs/4-sast/3-javascript/unsanitized-user-input-in-http-response-xss.md)
- [Unsanitized User input in HTTP Send file request](https://docs.sec1.io/user-docs/4-sast/3-javascript/unsanitized-user-input-in-http-send-file-request.md)
- [Unsanitized User input in OS command](https://docs.sec1.io/user-docs/4-sast/3-javascript/unsanitized-user-input-in-os-command.md)
- [Unsanitized user input in raw HTML strings (XSS)](https://docs.sec1.io/user-docs/4-sast/3-javascript/unsanitized-user-input-in-raw-html-strings-xss.md)
- [Unsanitized User input in Redirect HAPI](https://docs.sec1.io/user-docs/4-sast/3-javascript/unsanitized-user-input-in-redirect-hapi.md)
- [Unsanitized user input in redirect](https://docs.sec1.io/user-docs/4-sast/3-javascript/unsanitized-user-input-in-redirect-lang.md)
- [Unsanitized User input in Redirect](https://docs.sec1.io/user-docs/4-sast/3-javascript/unsanitized-user-input-in-redirect.md)
- [Unsanitized user input in regular expression](https://docs.sec1.io/user-docs/4-sast/3-javascript/unsanitized-user-input-in-regular-expression.md)
- [Unsanitized User Input in Resource Rendering](https://docs.sec1.io/user-docs/4-sast/3-javascript/unsanitized-user-input-in-resource-rendering.md)
- [Unsanitized input in SQL query](https://docs.sec1.io/user-docs/4-sast/3-javascript/unsanitized-user-input-in-sql-query.md)
- [Unsanitized User Input in UI](https://docs.sec1.io/user-docs/4-sast/3-javascript/unsanitized-user-input-in-ui.md)
- [Unsanitized user input in XML parsing method](https://docs.sec1.io/user-docs/4-sast/3-javascript/unsanitized-user-input-in-xml-parsing-method.md)
- [Usage of default Cookie Configuration](https://docs.sec1.io/user-docs/4-sast/3-javascript/usage-of-default-cookie-configuration.md)
- [Usage of Default Session Cookie Configuration](https://docs.sec1.io/user-docs/4-sast/3-javascript/usage-of-default-session-cookie-configuration.md)
- [Usage of externally controlled input to select code](https://docs.sec1.io/user-docs/4-sast/3-javascript/usage-of-externally-controlled-input-to-select-code.md)
- [Usage of hard-coded Passport Secret](https://docs.sec1.io/user-docs/4-sast/3-javascript/usage-of-hard-coded-passport-secret.md)
- [Usage of hard-coded secret](https://docs.sec1.io/user-docs/4-sast/3-javascript/usage-of-hard-coded-secret-lang.md)
- [Usage of Hard-Coded Secret](https://docs.sec1.io/user-docs/4-sast/3-javascript/usage-of-hard-coded-secret.md)
- [Usage of insecure HTTP connection](https://docs.sec1.io/user-docs/4-sast/3-javascript/usage-of-insecure-http-connection.md)
- [Usage of insecure websocket connection](https://docs.sec1.io/user-docs/4-sast/3-javascript/usage-of-insecure-websocket-connection.md)
- [Usage of insufficient random value](https://docs.sec1.io/user-docs/4-sast/3-javascript/usage-of-insufficient-random-value.md)
- [Usage of manual HTML sanitization (XSS)](https://docs.sec1.io/user-docs/4-sast/3-javascript/usage-of-manual-html-sanitization-xss.md)
- [Usage of Session on Static Asset (CSRF)](https://docs.sec1.io/user-docs/4-sast/3-javascript/usage-of-session-on-static-asset-csrf.md)
- [Usage of vulnerable DOMPurify package](https://docs.sec1.io/user-docs/4-sast/3-javascript/usage-of-vulnerable-dompurify-package.md)
- [Usage of vulnerable marked package](https://docs.sec1.io/user-docs/4-sast/3-javascript/usage-of-vulnerable-marked-package.md)
- [Usage of weak encryption algorithm (DES)](https://docs.sec1.io/user-docs/4-sast/3-javascript/usage-of-weak-encryption-algorithm-des.md)
- [Usage of weak encryption algorithm on a password (DES)](https://docs.sec1.io/user-docs/4-sast/3-javascript/usage-of-weak-encryption-algorithm-on-a-password-des.md)
- [Usage of weak encryption algorithm on a password (RC4)](https://docs.sec1.io/user-docs/4-sast/3-javascript/usage-of-weak-encryption-algorithm-on-a-password-rc4.md)
- [Usage of weak encryption algorithm (RC4)](https://docs.sec1.io/user-docs/4-sast/3-javascript/usage-of-weak-encryption-algorithm-rc4.md)
- [Usage of weak hashing library (MD5)](https://docs.sec1.io/user-docs/4-sast/3-javascript/usage-of-weak-hashing-library-md5.md)
- [Usage of weak hashing library on a password (Argon2)](https://docs.sec1.io/user-docs/4-sast/3-javascript/usage-of-weak-hashing-library-on-a-password-argon2.md)
- [Usage of weak hashing library on a password (MD5)](https://docs.sec1.io/user-docs/4-sast/3-javascript/usage-of-weak-hashing-library-on-a-password-md5.md)
- [Usage of weak hashing library on a password (SHA-1)](https://docs.sec1.io/user-docs/4-sast/3-javascript/usage-of-weak-hashing-library-on-a-password-sha1.md)
- [Usage of weak hashing library (SHA-1)](https://docs.sec1.io/user-docs/4-sast/3-javascript/usage-of-weak-hashing-library-sha1.md)
- [SBOM Scanner](https://docs.sec1.io/user-docs/5-sbom-scanner.md)
- [Config](https://docs.sec1.io/user-docs/5-sbom-scanner/config.md)
- [Scan](https://docs.sec1.io/user-docs/5-sbom-scanner/scan.md)
- [CISO Console](https://docs.sec1.io/user-docs/6-ciso-console.md)
- [Pricing & Billing](https://docs.sec1.io/user-docs/7-pricing-billing.md)
- [CVE API](https://docs.sec1.io/user-docs/8-api.md)
- [DevSecOps Pipeline Collector — Runbook](https://docs.sec1.io/user-docs/9-setup-instructions.md): How to deploy the GitLab + CI-Pipeline collectors with crons disabled and drive collection via REST endpoints.
- [debug](https://docs.sec1.io/user-docs/9-setup-instructions/debug.md)
- [QC Jira + Zephyr Essential Collector — Runbook](https://docs.sec1.io/user-docs/9-setup-instructions/jira.md): How to deploy the QC Jira collector, configure it for a customer's Jira Server/DC + Zephyr Essential, and drive the pipeline via REST endpoints.