Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Repository Index
47,133 repositories indexed
1–21 of 21 · Most stars
Continuous Inspection
- sonarqube
- code-quality
- static-analysis
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
- ai
- code-intelligence
- dead-code
- developer-tools
static analysis of C/C++ code
- cppcheck
- c-plus-plus
- static-analysis
- cross-platform
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
- copy-paste
- duplicates
- cpd
- code-quality
A tool for use with clang to analyze #includes in C and C++ source files
A static source code analysis tool to improve quality and reduce defects for C, C++ and Objective-C
grep rough audit - source code auditing tool
- security
- shell
- vulnerability-detection
- source-code
A semi-opinionated library which is a source generator and a code analyser. It Source generates Value Objects
- csharp-sourcegenerator
- hacktoberfest
- patterns
- contributions-welcome
Linting tool for CloudFormation templates
- continuous-testing
- unit-testing
- cloudformation
- aws
:coffee: SonarSource Static Analyzer for Java Code Quality and Security
- java
- sonarqube
- static-code-analysis
- static-analyzer
Complex code hides connections, workflows, and business risks.Unvibe complex code. Trace business workflows.
- business-logic
- code-analysis
- code-understanding
- codebase-analysis
Code analyzer for C# and VB.NET projects
- c-sharp
- sonarqube
- static-analysis
- static-analyzer
plpgsql_check is a linter tool (does source code static analyze) for the PostgreSQL language plpgsql (the native language for PostgreSQL store procedures).
- plpgsql
- postgresql
- extension
- c
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
- sast
- security-tools
- security-scanner
- security-automation
SonarQube extension for Visual Studio providing code quality and security feedback directly in the IDE
- visual-studio
- sonarlint
- sonarqube
- code-quality
Puma Scan is a software security Visual Studio extension that provides real time, continuous source code analysis as development teams write code. Vulnerabilities are immediately displayed in the development environment as spell check and compiler warnings, preventing security bugs from entering your applications.
Compares two source sets and determines the appropriate semantic versioning to apply.
- php
- semver
- inspection
- ruleset
Know the risk of merging a pull request, and where it lives. Free, open-source CLI and GitHub Action: after your AI review, farol shows the riskiest files, what they reach, diff coverage and contract breaks. TypeScript/React, Go, Python.
- ai-code-review
- cli
- code-review
- developer-tools
Tooling and libraries to enforce zero heap allocations in Golang