Dockerfile linter, validate inline bash, written in Haskell
- dockerfile
- linter
- shellcheck
- haskell
47,133 repositories indexed
1–17 of 17 · Most stars
Dockerfile linter, validate inline bash, written in Haskell
PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards.
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.
PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards.
PHP Magic Number Detector
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
Linter for dangerous Postgres migration patterns in Diesel and SQLx. Prevents downtime caused by unsafe schema changes.
A CLI tool to automatically add type annotations into Python code. Must have tool for annotating existing code.
Cross-file drift checker. Keeps code, configs, and docs in sync deterministically. Supports 35+ languages.
Catch broken links before your readers do.
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
PostgreSQL migration linter. Blocks unsafe migrations before merge: 112 rules, the real Postgres parser, lock analysis, auto-fix. CLI, GitHub Action, MCP.
Preview Go struct field-alignment savings as a diff, not a rewrite.
Turn any Java, Kotlin or Python project into an AI-ready context file in one command.