A static analyzer for Java, C, C++, and Objective-C
Repository Index
47,133 repositories indexed
1–24 of 31 · Most stars
PHP Static Analysis Tool - discover bugs in your code without running it!
- phpstan
- static-analysis
- php
- php7
Nginx configuration static analyzer
An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.
Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.
- php
- static-analysis
- phan
- analysis
An extensible multilanguage static code analyzer.
- code-analysis
- code-quality
- static-analysis
- static-code-analysis
A tool for use with clang to analyze #includes in C and C++ source files
Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code.
- code-analyzer
- code-style
- coding-standards
- formatter
Static analyzer for C/C++ based on the theory of Abstract Interpretation.
- static-analysis
- software-verification
- abstract-interpretation
- program-analysis
Beautiful and understandable static analysis tool for PHP
- static-analyzer
- quality
- php
- metrics
PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.
- mess-detector
- php
- pmd
- static-analysis
Static analyzer and linter for Clojure code that sparks joy
- clojure
- clojurescript
- linter
- static-analysis
The repository host gives no description.
- hacktoberfest
:coffee: SonarSource Static Analyzer for Java Code Quality and Security
- java
- sonarqube
- static-code-analysis
- static-analyzer
NGINX configuration static analyzer
An analyzer library for C# and VB that uses Roslyn to produce refactorings, code analysis, and other niceties.
- hacktoberfest
Set of roslyn-based analyzers for catching common C# errors (inspired by Google's error-prone)
DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.
Code analyzer for C# and VB.NET projects
- c-sharp
- sonarqube
- static-analysis
- static-analyzer
plpgsql_check is a linter tool (does source code static analyze) for the PostgreSQL language plpgsql (the native language for PostgreSQL store procedures).
- plpgsql
- postgresql
- extension
- c
Flay analyzes code for structural similarities. Differences in literal values, variable, class, method names, whitespace, programming style, braces vs do/end, etc are all ignored.
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
- sast
- security-tools
- security-scanner
- security-automation
eBPF verifier based on abstract interpretation
- abstract-interpretation
- static-analyzer
- ebpf
- ebpf-verifier
Performs advanced static analysis on PHP code