Source code integrations
The attack surface does not stop at the network perimeter. Your software dependencies and source code are also input vectors. Exposia allows you to analyze them from the same platform.
Benefits
- Dependency scan Detect vulnerable third-party libraries in your projects according to published CVEs.
- Static code analysis (SAST) Identify dangerous code patterns — injections, mishandling of secrets, XSS, etc.
- Git integration Connect GitHub, GitLab (including self-hosted), or Azure DevOps. Exposia clones and analyzes your repositories without keeping your code.
- Detailed view See also the “DevSecOps and SAST” feature page for the full tool list (Semgrep, Trivy, Gitleaks, etc.).
How it works
- 1. Connect your Git provider Authorize Exposia to access your repositories via OAuth from the integration settings.
- 2. Select repositories Choose the repositories to analyze. Exposia only clones what you explicitly allow.
- 3. Results in findings Vulnerabilities detected in the code appear in your findings list with severity and precise location.
Frequently asked questions
Is my source code stored on your servers?
The code is temporarily cloned for analysis and then deleted. No permanent retention of your source code.
What languages are supported?
Python, JavaScript/TypeScript, Go, Java and others. The list is expanded regularly.
Can I scan private repositories?
Yes, via OAuth integration with appropriate permissions, private repositories are supported.