47,133 repositories indexed
1–24 of 28 · Most stars
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Static code analysis for Kotlin
Tfsec is now part of Trivy
High performance, maintainable stylesheets.
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications
It's not just a linter that annoys you!
🔰 Instant PHP quality checks from your console
An extensible multilanguage static code analyzer.
SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.
The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
The repository host gives no description.
A semi-opinionated library which is a source generator and a code analyser. It Source generates Value Objects
Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.
Linting tool for CloudFormation templates
The tool to avoid various issues due to inconsistencies and inefficiencies between a database schema and application models.
An analyzer library for C# and VB that uses Roslyn to produce refactorings, code analysis, and other niceties.
StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
A fist full of code metrics
Identifies and prioritizes Class and Package Cycles and Anti-pattens in Java & Kotlin codebases you should refactor first.
A static code analyser for annotated TODO comments
Performs advanced static analysis on PHP code