Grouper Developers Forum

[Tom Barton <>]

From time to time we've discussed on grouper-dev conference calls the desire to incorporate 
some sort of code-level security assessment into the grouper release process. One potential 
source of info on tools that might be useful in that role is OWASP, specifically:

https://www.owasp.org/index.php/Phoenix/Tools#Java_static_analysis.2C_security_frameworks.2C_and_web_application_security_tools

Does anyone have experience with any of these or other similar tools, or any advice or lessons 
that we'd be smart to take into account?

Thanks,
Tom