Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Repository Index
47,133 repositories indexed
1–18 of 18 · Most stars
Continuous Inspection
- sonarqube
- code-quality
- static-analysis
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
- ai
- code-intelligence
- dead-code
- developer-tools
static analysis of C/C++ code
- cppcheck
- c-plus-plus
- static-analysis
- cross-platform
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
- copy-paste
- duplicates
- cpd
- code-quality
A tool for use with clang to analyze #includes in C and C++ source files
A static source code analysis tool to improve quality and reduce defects for C, C++ and Objective-C
grep rough audit - source code auditing tool
- security
- shell
- vulnerability-detection
- source-code
A semi-opinionated library which is a source generator and a code analyser. It Source generates Value Objects
- csharp-sourcegenerator
- hacktoberfest
- patterns
- contributions-welcome
Linting tool for CloudFormation templates
- continuous-testing
- unit-testing
- cloudformation
- aws
:coffee: SonarSource Static Analyzer for Java Code Quality and Security
- java
- sonarqube
- static-code-analysis
- static-analyzer
Complex code hides connections, workflows, and business risks.Unvibe complex code. Trace business workflows.
- business-logic
- code-analysis
- code-understanding
- codebase-analysis
Code analyzer for C# and VB.NET projects
- c-sharp
- sonarqube
- static-analysis
- static-analyzer
plpgsql_check is a linter tool (does source code static analyze) for the PostgreSQL language plpgsql (the native language for PostgreSQL store procedures).
- plpgsql
- postgresql
- extension
- c
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
- sast
- security-tools
- security-scanner
- security-automation
SonarQube extension for Visual Studio providing code quality and security feedback directly in the IDE
- visual-studio
- sonarlint
- sonarqube
- code-quality
Know the risk of merging a pull request, and where it lives. Free, open-source CLI and GitHub Action: after your AI review, farol shows the riskiest files, what they reach, diff coverage and contract breaks. TypeScript/React, Go, Python.
- ai-code-review
- cli
- code-review
- developer-tools