ABAP Code Scanner

The ABAP Code Scanner is a powerful static code analysis tool designed to identify security vulnerabilities, coding errors, and potential performance issues in ABAP (Advanced Business Application Programming) code. As an integral part of SAP systems, ensuring the security and quality of ABAP code is crucial for maintaining robust and secure enterprise applications.

Our tool performs deep analysis of your ABAP code to ensure continuous code quality improvement.

We’ve partnered with OWASP to make ABAP Code Scan open-source. Find it on GitHub:

• RedRays repository: Visit RedRays GitHub


• OWASP repository: Visit OWASP GitHub

Installation

Clone the repository:

git clone https://github.com/redrays-io/ABAP-Code-Scanner.git
cd ABAP-Code-Scanner

Install the required dependencies:

pip install -r requirements.txt

Usage

To run the ABAP Code Scanner:

python main.py path/to/abap/code/dir

Optional arguments:

• -c, –config: Path to the configuration file (default: config.yml)

Report

When the program finishes successfully, you will find the abap_security_scan_report.xlsx file in the project folder. Below, you can see an example of the report file.