[Progress Communities] [Progress OpenEdge ABL] Forum Post: RE: Code Scan Tool

[Riverside Software]

I may be wrong, but I don't think there are any off-the-shelf tools to do security scans of OpenEdge code. The OpenEdge plugin for SonarQube does static code analysis for OpenEdge procedures / classes, but there are no rules scanning for vulnerabilities. It may however be extended for this purpose. Disclaimer: I'm the author of the OpenEdge plugin for SQ

Continue reading...