A static analyzer for Java, C, C++, and Objective-C
Repository Index
47,133 repositories indexed
1–24 of 33 · Most stars
The best way of working with Protocol Buffers.
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Static code analysis for Kotlin
- static
- analysis
- kotlin
- codesmells
Tfsec is now part of Trivy
Awesome autocompletion, static analysis and refactoring library for python
- static-analysis
- auto-complete
- python
- refactoring
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications
- static-analysis
- php
- type-inference
- security-analysis
It's not just a linter that annoys you!
🔰 Instant PHP quality checks from your console
- php
- static
- analytics
- code
Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.
- php
- static-analysis
- phan
- analysis
An extensible multilanguage static code analyzer.
- code-analysis
- code-quality
- static-analysis
- static-code-analysis
SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
- findbugs
- static-analysis
- code-analysis
- static-code-analysis
A static source code analysis tool to improve quality and reduce defects for C, C++ and Objective-C
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.
- mess-detector
- php
- pmd
- static-analysis
The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
- findbugs
- java
- security-audit
- owasp
The repository host gives no description.
- hacktoberfest
A semi-opinionated library which is a source generator and a code analyser. It Source generates Value Objects
- csharp-sourcegenerator
- hacktoberfest
- patterns
- contributions-welcome
Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.
- attack-surfaces
- pentesting
- security
- devsecops
Linting tool for CloudFormation templates
- continuous-testing
- unit-testing
- cloudformation
- aws
:coffee: SonarSource Static Analyzer for Java Code Quality and Security
- java
- sonarqube
- static-code-analysis
- static-analyzer
An analyzer library for C# and VB that uses Roslyn to produce refactorings, code analysis, and other niceties.
- hacktoberfest
Flay analyzes code for structural similarities. Differences in literal values, variable, class, method names, whitespace, programming style, braces vs do/end, etc are all ignored.
phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code
- php
- php-codesniffer
- phpcs
- static-code-analysis