Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Repository Index
47,133 repositories indexed
1–22 of 22 · Most stars
Go security checker
- golang
- security
- security-tools
- security-automation
[mirror] Go Tools
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
- copy-paste
- duplicates
- cpd
- code-quality
An extensible multilanguage static code analyzer.
- code-analysis
- code-quality
- static-analysis
- static-code-analysis
A static code analysis tool for the Elixir language with a focus on code consistency and teaching.
- elixir
- code-analysis
- static-analysis
- linter
A tool for use with clang to analyze #includes in C and C++ source files
Pretty good call graphs for dynamic languages
A Golang tool that does static analysis, unit testing, code review and generate code quality report.
- codereview
- reporter
- golang
- golang-tools
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
:coffee: SonarSource Static Analyzer for Java Code Quality and Security
- java
- sonarqube
- static-code-analysis
- static-analyzer
DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.
Scan Nix files for dead code
plpgsql_check is a linter tool (does source code static analyze) for the PostgreSQL language plpgsql (the native language for PostgreSQL store procedures).
- plpgsql
- postgresql
- extension
- c
Chronos - A static race detector for the go language
- analysis
- golang
- synchronization
- detection
C Intermediate Language
a tool for code clone detection
- go
- tool
- code-clones
- golang
Analyzes Elm projects, to help find mistakes before your users find them.
- elm-review
- elm
- elm-lang
- static-code-analysis
Know the risk of merging a pull request, and where it lives. Free, open-source CLI and GitHub Action: after your AI review, farol shows the riskiest files, what they reach, diff coverage and contract breaks. TypeScript/React, Go, Python.
- ai-code-review
- cli
- code-review
- developer-tools
Delphi language plugin for SonarQube
- delphi
- pascal
- sonarqube-plugin
- code-quality
Tooling and libraries to enforce zero heap allocations in Golang
Guess Erlang Application Scattering
- erlang
- beam-files