adding socket.dev

[ahmadnassri]

in:

• _data/tools.js
• pages/Component_Analysis.md
• pages/Free_for_Open_Source_Application_Security_Tools.md

[github-actions]

The following issues were identified, when validating against the schema:

Summary (click the triangle/control to the left to expand)

_data/tools.json invalid
data/0/license must be equal to one of the allowed values

[kingthorin]

These just don't belong in these lists. A WAF is not a DAST. An SCA tool is not a SAST.

[ahmadnassri]

thx, will update with more info to clarify, Socket has SAST support now.

and the "firewall" is actually doing dynamic analysis at run-time of package install to determine malicious ones to block...

[psiinon]

A firewall is not DAST by any definition I've ever seen! DAST involves dynamic testing, which means interacting with the target, typically by sending payloads.