ShellCheck, a static analysis tool for shell scripts
- haskell
- shell
- static-analysis
- bash
Repository Index
72,862 visible repositories in the index
1–24 of 176 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
- agent-security
- agent-skills
- agentic-ai
- ai-security
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
- static-analysis
- dynamic-analysis
- mobsf
- android-security
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
- static-analysis
- static-code-analysis
- java
- go
⚡A CLI tool for code structural search, lint and rewriting. Written in Rust
A static analyzer for Java, C, C++, and Objective-C
PHP Static Analysis Tool - discover bugs in your code without running it!
- phpstan
- static-analysis
- php
- php7
OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security
- ai-security
- application-security
- cli
- code-scanning
✂️ Find unused files, dependencies and exports in your JavaScript and TypeScript projects. Knip it before you ship it!
- dependency-analysis
- lint
- maintenance
- typescript
Continuous Inspection
- sonarqube
- code-quality
- static-analysis
CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
- semmle-ql
- codeql
- github-advanced-security
- github-security-lab
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Go security checker
- golang
- security
- security-tools
- security-automation
🐳 A most popular sql audit platform for mysql
Nginx configuration static analyzer
Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents
Bandit is a tool designed to find common security issues in Python code.
- linter
- bandit
- security-tools
- security-scanner
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
- ai
- code-intelligence
- dead-code
- developer-tools
Validate and visualize dependencies. Your rules. JavaScript, TypeScript, CoffeeScript. ES6, CommonJS, AMD.
- dependency-cruiser
- typescript
- javascript
- static-analysis
TranslatedDeepAudit: An AI hacker team for everyone, putting vulnerability discovery within reach. Beginners can deploy and run it with one click, with autonomous collaborative auditing + automated sandbox PoC verification. Supports private deployment with Ollama and one-click report generation. Supports relay stations. Making security no longer expensive and auditing no longer complicated.
- ai
- bug-detection
- code-audit
- code-quality
A static analysis security vulnerability scanner for Ruby on Rails applications
- ruby
- rails
- security
- static-analysis
Static code analysis for Kotlin
- static
- analysis
- kotlin
- codesmells
Tfsec is now part of Trivy
- terraform
- security
- scanner
- static-analysis
An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.