Repository Index

ShellCheck, a static analysis tool for shell scripts

• haskell
• shell
• static-analysis
• bash

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

• terraform
• static-analysis
• aws
• gcp

Go security checker

• golang
• security
• security-tools
• security-automation

Staticcheck - The advanced Go linter

• linters
• static-analysis
• linter
• staticcheck

static analysis of C/C++ code

• cppcheck
• c-plus-plus
• static-analysis
• cross-platform

🔰 Instant PHP quality checks from your console

• php
• static
• analytics
• code

Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code.

• code-analyzer
• code-style
• coding-standards
• formatter

A Golang tool that does static analysis, unit testing, code review and generate code quality report.

• codereview
• reporter
• golang
• golang-tools

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

• iac
• infrastructure-as-code
• security
• appsec

A tool for linting and static analysis of Lua code.

• lua
• linter

NGINX configuration static analyzer

• checker
• configuration
• linter
• linting

A CLI tool to check whether a specific composer package uses imported symbols that aren't part of its direct composer dependencies

• code-quality
• ci-tools

plpgsql_check is a linter tool (does source code static analyze) for the PostgreSQL language plpgsql (the native language for PostgreSQL store procedures).

• plpgsql
• postgresql
• extension
• c

Reduce Similar & Duplicated CSS Classes with Diff in Seconds!

• css
• redundancy-analysis
• cicd
• code-quality

Static XSS audit skill with 14 layers of checks for React, TypeScript, and JavaScript projects.

Puma Scan is a software security Visual Studio extension that provides real time, continuous source code analysis as development teams write code. Vulnerabilities are immediately displayed in the development environment as spell check and compiler warnings, preventing security bugs from entering your applications.

A static code analyser for annotated TODO comments

• go
• linters
• todo
• hacktoberfest

Compares two source sets and determines the appropriate semantic versioning to apply.

• php
• semver
• inspection
• ruleset

A high-performance static analysis toolkit for Ruby

• ruby
• static-analysis
• type-checking

Roslyn-based analysis for code using the Serilog logging library. Checks for common mistakes and usage problems.

• serilog
• roslyn
• analysis
• refactor

An Elixir tool for checking safety of database migrations.

• elixir
• static-analysis
• code-analysis
• credo

👮Sanitize your Assets.xcassets files

• script
• ios
• swift
• xcode

Gixy-Next: NGINX Configuration Security Scanner & Performance Checker

• gixy
• nginx
• nginx-configuration
• security

apicompat checks recent changes to a Go project for backwards incompatible changes