ShellCheck, a static analysis tool for shell scripts
- haskell
- shell
- static-analysis
- bash
Repository Index
86,076 visible repositories in the index
1–24 of 58 · Most stars
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
- static-analysis
- dynamic-analysis
- mobsf
- android-security
A static analyzer for Java, C, C++, and Objective-C
Validate and visualize dependencies. Your rules. JavaScript, TypeScript, CoffeeScript. ES6, CommonJS, AMD.
- dependency-cruiser
- typescript
- javascript
- static-analysis
TranslatedDeepAudit: An AI hacker team for everyone, putting vulnerability discovery within reach. Beginners can deploy and run it with one click, with autonomous collaborative auditing + automated sandbox PoC verification. Supports private deployment with Ollama and one-click report generation. Supports relay stations. Making security no longer expensive and auditing no longer complicated.
- ai
- bug-detection
- code-audit
- code-quality
TypeScript Compiler API wrapper for static analysis and programmatic code changes.
- typescript
- ast
- code-generation
- javascript
Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust.
- code-property-graph
- compiler-theory
- program-analysis
- robdd
An advanced, unified platform for code quality, architectural metrics, and Agile analytics. Features Python AST parsing, Java static analysis (code smells), and interactive project health dashboards built with Streamlit.
- agile
- code-analysis
- dashboard
- data-visualization
Pretty good call graphs for dynamic languages
A model checker for Rust programs.
- rust
- model-checking
- verification
Dafny is a verification-aware programming language
- programming-language
- verification
KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best practices.
- static-analysis
- yaml-files
- helm-charts
- kubernetes
🔎 Static code analysis engine to find security issues in code.
Static analyzer for C/C++ based on the theory of Abstract Interpretation.
- static-analysis
- software-verification
- abstract-interpretation
- program-analysis
A Golang tool that does static analysis, unit testing, code review and generate code quality report.
- codereview
- reporter
- golang
- golang-tools
Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in your Kubernetes YAML and Charts. Static code analysis for Kubernetes.
- kubernetes
- linter
- ci
- go
Soot - A Java optimization framework
- java
- optimization
- java-optimization-framework
- analysis-framework
A Python tool to visualize + enforce dependencies, using modular architecture 🌎 Open source 🐍 Installable via pip 🔧 Able to be adopted incrementally - ⚡ Implemented with no runtime impact ♾️ Interoperable with your existing systems 🦀 Written in rust
- ci
- cli
- developer-tools
- open-source
Interactive architecture diagrams for codebases
A command line tool to mine and analyze data from version-control systems
- behavioral-code-analysis
- code-analysis-tool
- repository-mining
- technical-debt
Web framework that allows performing periodic syncs of data sources and performing analysis on the identified results
PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.
- mess-detector
- php
- pmd
- static-analysis
Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.
A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications
- pyt
- control-flow-graph
- static-analysis
- python