ShellCheck, a static analysis tool for shell scripts
- haskell
- shell
- static-analysis
- bash
Repository Index
84,583 visible repositories in the index
1–24 of 168 · Most stars
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
- static-analysis
- dynamic-analysis
- mobsf
- android-security
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
- static-analysis
- static-code-analysis
- java
- go
⚡A CLI tool for code structural search, lint and rewriting. Written in Rust
A static analyzer for Java, C, C++, and Objective-C
PHP Static Analysis Tool - discover bugs in your code without running it!
- phpstan
- static-analysis
- php
- php7
✂️ Find unused files, dependencies and exports in your JavaScript and TypeScript projects. Knip it before you ship it!
- dependency-analysis
- lint
- maintenance
- typescript
Continuous Inspection
- sonarqube
- code-quality
- static-analysis
Remove unused CSS. Also works with single-page apps.
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Go security checker
- golang
- security
- security-tools
- security-automation
Bandit is a tool designed to find common security issues in Python code.
- linter
- bandit
- security-tools
- security-scanner
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
- ai
- code-intelligence
- dead-code
- developer-tools
Validate and visualize dependencies. Your rules. JavaScript, TypeScript, CoffeeScript. ES6, CommonJS, AMD.
- dependency-cruiser
- typescript
- javascript
- static-analysis
TranslatedDeepAudit: An AI hacker team for everyone, putting vulnerability discovery within reach. Beginners can deploy and run it with one click, with autonomous collaborative auditing + automated sandbox PoC verification. Supports private deployment with Ollama and one-click report generation. Supports relay stations. Making security no longer expensive and auditing no longer complicated.
- ai
- bug-detection
- code-audit
- code-quality
A static analysis security vulnerability scanner for Ruby on Rails applications
- ruby
- rails
- security
- static-analysis
Catch common Java mistakes as compile-time errors
- java
- static-analysis
Static code analysis for Kotlin
- static
- analysis
- kotlin
- codesmells
Tfsec is now part of Trivy
- terraform
- security
- scanner
- static-analysis
Static analysis for GitHub Actions (and more)
Staticcheck - The advanced Go linter
- linters
- static-analysis
- linter
- staticcheck
An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.
static analysis of C/C++ code
- cppcheck
- c-plus-plus
- static-analysis
- cross-platform
⚗️ Adds code analysis to Laravel improving developer productivity and code quality.
- laravel
- phpstan
- php
- code-analysis