<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# API Reference — Conducting White Box Security Assessment

## semgrep — Multi-language static analysis

```bash
# Auto-detect language and scan
semgrep scan --config auto ./src/

# OWASP Top 10 scan
semgrep scan --config p/owasp-top-ten --sarif -o results.sarif ./

```

## bandit — Python security linter

```bash
# Scan with medium+ severity
bandit -r ./src/ -f json -o results.json -ll

# Target specific test IDs
bandit -r ./src/ -t B301,B302,B303

```

## gitleaks — Secret detection in git repositories

```bash
# Scan current directory
gitleaks detect --source . --report-format json

# Scan full git history
gitleaks detect --source . --log-opts='--all'

```
