Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Repository Index
47,133 repositories indexed
1–24 of 27 · Most stars
The best way of working with Protocol Buffers.
Go security checker
- golang
- security
- security-tools
- security-automation
[mirror] Go Tools
Catch common Java mistakes as compile-time errors
- java
- static-analysis
Tfsec is now part of Trivy
Staticcheck - The advanced Go linter
- linters
- static-analysis
- linter
- staticcheck
Pretty good call graphs for dynamic languages
Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code.
- code-analyzer
- code-style
- coding-standards
- formatter
A Golang tool that does static analysis, unit testing, code review and generate code quality report.
- codereview
- reporter
- golang
- golang-tools
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
TranslatedA SQL full-lifecycle quality management platform that supports many different types of databases, covers pre-event control, post-event supervision, and standard release scenarios, and helps you establish quality standards
Set of roslyn-based analyzers for catching common C# errors (inspired by Google's error-prone)
Reduce Similar & Duplicated CSS Classes with Diff in Seconds!
- css
- redundancy-analysis
- cicd
- code-quality
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
- sast
- security-tools
- security-scanner
- security-automation
A static code analyser for annotated TODO comments
- go
- linters
- todo
- hacktoberfest
Chronos - A static race detector for the go language
- analysis
- golang
- synchronization
- detection
Remove unnecessary type conversions from Go source
a tool for code clone detection
- go
- tool
- code-clones
- golang
Owi: Seamless program analysis for C, C++, Go, Haskell, LLVM, Rust, Wasm and Zig.
TranslatedA code audit platform built as a secondary development of artex | Adds local decompilation of Java dependency libraries | Multi-account management
Dependency analysis and optimization toolkit for modern JavaScript and TypeScript codebases. Enforce dependency graph hygiene and remove unused code with a very fast CLI.
- dependency-analysis
- reverse-dependencies
- dependency-resolution
- file-dependencies
Django application that performs SAST and Malware Analysis for Android APKs
- android-security
- sast
- malware-analysis
- code-security