Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Repository Index
47,133 repositories indexed
1–11 of 11 · Most stars
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
- static-analysis
- static-analyzers
- linter
- code-quality
✍🏻 Source Code Deep Dives, System Design & Engineering Blogs | Halfrost-Field 冰霜之地：源码解析、系统设计与工程实践笔记
- ios
- objective-c
- swift
- javascript
Go security checker
- golang
- security
- security-tools
- security-automation
Bandit is a tool designed to find common security issues in Python code.
- linter
- bandit
- security-tools
- security-scanner
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
- findbugs
- java
- security-audit
- owasp
:coffee: SonarSource Static Analyzer for Java Code Quality and Security
- java
- sonarqube
- static-code-analysis
- static-analyzer
StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
- bugbounty
- security
- security-tools
- mobile-security
phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code
- php
- php-codesniffer
- phpcs
- static-code-analysis
A static analysis tool for security
- php
- static-code-analysis
- security-tools
- vulnerability-scanners