1.SonarSource / sonarqubeContinuous Inspectionsonarqubecode-qualitystatic-analysisJavaLGPL-3.011K total2.2K forks+27 starsfrom 11,122 · score 3.33
2.find-sec-bugs / find-sec-bugsThe SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)findbugsjavasecurity-auditowasptaint-analysiscode-analysis+5 moreJavaLGPL-3.02.5K total486 forks+1 starsfrom 2,452 · score 0.69
3.SonarSource / sonarlint-visualstudioSonarQube extension for Visual Studio providing code quality and security feedback directly in the IDEvisual-studiosonarlintsonarqubecode-qualitysecuritystatic-analysisC#LGPL-3.0501 total86 forks+1 starsfrom 500 · score 0.69