47,133 repositories indexed
1–24 of 32 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
A static analyzer for Java, C, C++, and Objective-C
Continuous Inspection
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
A static analysis security vulnerability scanner for Ruby on Rails applications
Static code analysis for Kotlin
Tfsec is now part of Trivy
An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.
⚗️ Adds code analysis to Laravel improving developer productivity and code quality.
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications
It's not just a linter that annoys you!
🔰 Instant PHP quality checks from your console
An extensible multilanguage static code analyzer.
Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.
A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead
A static source code analysis tool to improve quality and reduce defects for C, C++ and Objective-C
A Ruby code quality reporter
A Golang tool that does static analysis, unit testing, code review and generate code quality report.
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
Beautiful and understandable static analysis tool for PHP
grep rough audit - source code auditing tool