An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.
Repository Index
47,133 repositories indexed
1–12 of 12 · Most stars
A static code analysis tool for the Elixir language with a focus on code consistency and teaching.
- elixir
- code-analysis
- static-analysis
- linter
A static source code analysis tool to improve quality and reduce defects for C, C++ and Objective-C
Roslynator is a set of code analysis tools for C#, powered by Roslyn.
- csharp
- roslyn
- visual-studio
- dotnet
PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.
- mess-detector
- php
- pmd
- static-analysis
Set of roslyn-based analyzers for catching common C# errors (inspired by Google's error-prone)
Flog reports the most tortured code in an easy to read pain report. The higher the score, the more pain the code is in.
plpgsql_check is a linter tool (does source code static analyze) for the PostgreSQL language plpgsql (the native language for PostgreSQL store procedures).
- plpgsql
- postgresql
- extension
- c
Flay analyzes code for structural similarities. Differences in literal values, variable, class, method names, whitespace, programming style, braces vs do/end, etc are all ignored.
Reduce Similar & Duplicated CSS Classes with Diff in Seconds!
- css
- redundancy-analysis
- cicd
- code-quality
An Elixir tool for checking safety of database migrations.
- elixir
- static-analysis
- code-analysis
- credo
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
- ansible
- ansible-playbook
- devsecops
- infrastructure-as-code