1.carthage-software / mago
Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code.
+503 stars
from 3,040 · score 6.22
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
13 repositories by Attention Score · May 8, 2026 – Nov 3, 2026 (UTC)
2.bridgecrewio / checkov
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
- terraform
- static-analysis
- aws
- gcp
- azure
- aws-security
- +7 more
+475 stars
from 8,656 · score 6.17
3.bufbuild / buf
The best way of working with Protocol Buffers.
+471 stars
from 11,043 · score 6.16
4.PyCQA / bandit
Bandit is a tool designed to find common security issues in Python code.
- linter
- bandit
- security-tools
- security-scanner
- security
- static-code-analysis
- +1 more
+418 stars
from 7,952 · score 6.04
5.securego / gosec
Go security checker
- golang
- security
- security-tools
- security-automation
- static-analysis
- static-code-analysis
+240 stars
from 8,757 · score 5.48
6.detekt / detekt
Static code analysis for Kotlin
- static
- analysis
- kotlin
- codesmells
- linter
- gradle-plugin
- +4 more
+204 stars
from 6,902 · score 5.32
+134 stars
from 7,134 · score 4.91
8.Checkmarx / kics
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
- iac
- infrastructure-as-code
- security
- appsec
- cloudnative
- hacktoberfest
- +6 more
+115 stars
from 2,616 · score 4.75
9.SteveDunn / Vogen
A semi-opinionated library which is a source generator and a code analyser. It Source generates Value Objects
- csharp-sourcegenerator
- hacktoberfest
- patterns
- contributions-welcome
- ddd
- ddd-patterns
- +1 more
+84 stars
from 1,429 · score 4.44
10.Ericsson / codechecker
CodeChecker is an analyzer tooling, defect database and viewer extension for static and dynamic analyzer tools.
- clang
- cpp
- c
- clang-tidy
- static-analysis
- linux
- +12 more
+72 stars
from 2,558 · score 4.29
11.didi / booster
🚀Optimizer for mobile applications
- optimizer
- android
- gradle-plugin
- bytecode-manipulation
- static-analysis
+33 stars
from 5,046 · score 3.53
12.nccgroup / sobelow
Security-focused static analysis for the Phoenix Framework
+27 stars
from 1,771 · score 3.33
13.qax-os / goreporter
A Golang tool that does static analysis, unit testing, code review and generate code quality report.
- codereview
- reporter
- golang
- golang-tools
- test
- staticcheck
- +6 more
+11 stars
from 3,113 · score 2.48