Static Analysis & Code Quality

535 items from analysis-tools-dev/static-analysis ★14,830

0

Trivy github.com
tool category #docker link ↗

Aqua Security's open source simple and comprehensive vulnerability scanner for containers (suitable for CI).
0

ESLint github.com
tool category #nodejs link ↗

The pluggable linting utility for JavaScript.
0

Deepfence Threat Mapper github.com
tool category #docker link ↗

Powerful runtime vulnerability scanner for kubernetes, virtual machines and serverless.
0

angr github.com
tool category #static-analysis link ↗

Binary code analysis tool that also supports symbolic execution.
0

Gitleaks github.com
tool category #static-analysis link ↗

A SAST tool for detecting hardcoded secrets like passwords, api keys, and tokens in git repos.
0

pyright github.com
tool category #python link ↗

Fast type checker meant for large Python source bases. It can run in a “watch” mode and performs fast incremental updates when files are modified.
0

Grype github.com
tool category #docker link ↗

A vulnerability scanner for container images, filesystems and SBOMs.
0

SwiftFormat github.com
tool category #ios link ↗

A code library and command-line formatting tool for reformatting Swift code.
0

rustfmt github.com
tool category #rust link ↗

Rust code formatter maintained by the Rust team and included in cargo
0

cwe_checker github.com
tool category #ocaml link ↗

cwe_checker finds vulnerable patterns in binary executables.
0

proselint github.com
tool category #static-analysis link ↗

A linter for English prose with a focus on writing style instead of grammar.
0

TypeScript ESLint github.com
tool category #static-analysis link ↗

TypeScript language extension for eslint.
0

bundler-audit github.com
tool category #ruby link ↗

Audit Gemfile.lock for gems with security vulnerabilities reported in Ruby Advisory Database.
0

clair github.com
tool category #static-analysis link ↗

Vulnerability Static Analysis for Containers.
0

Tsunami Security Scanner github.com
tool category #static-analysis link ↗

A general purpose network security scanner with an extensible plugin system for detecting high severity RCE-like vulnerabilities with high confidence. Custom detectors for finding vulnerabilities (e.g. open APIs) can be added.
0

XO github.com
tool category #nodejs link ↗

Enforce strict code style using the JavaScript happiness style.
0

Angular github.com
tool category #eslint link ↗

Linting rules for Angular (v2+).
0

bullet github.com
tool category #ruby link ↗

Help to kill N+1 queries and unused eager loading.
0

.NET Compiler Platform ("Roslyn") Analyzers github.com
tool category #dotnet-core link ↗

Roslyn-based implementation of FxCop analyzers.
0

tfsec github.com
tool category #static-analysis link ↗

Terraform static analysis tool that prevents potential security issues by checking cloud misconfigurations at build time and directly integrates with the HCL parser for better results. Checks for violations of AWS, Azure and GCP security best practice recommendations.
0

PHP Insights github.com
tool category #static-analysis link ↗

Instant PHP quality checks from your console. Analysis of code quality and coding style as well as overview of code architecture and its complexity.
0

oxc github.com
tool category #static-analysis link ↗

The Oxidation Compiler is creating a suite of high-performance tools for the JavaScript / TypeScript language re-written in Rust.
0

credo github.com
tool category #elixir link ↗

A static code analysis tool with a focus on code consistency and teaching Elixir. (Docs).
0

Manalyze github.com
tool category #static-analysis link ↗

A static analyzer, which checks portable executables for malicious content.
0

vulture github.com
tool category #python link ↗

Find unused classes, functions and variables in Python code.
0

detect-secrets github.com
tool category #static-analysis link ↗

An enterprise friendly way of detecting and preventing secrets in code. It does this by running periodic diff outputs against heuristically crafted regex statements, to identify whether any new secret has been committed. This way, it avoids the overhead of digging through all…
0

DevSkim github.com
tool category #dotnet-core link ↗

Regex-based static analysis tool for Visual Studio, VS Code, and Sublime Text - C/C++, C#, PHP, ASP, Python, Ruby, Java, and others.
0

Reek github.com
tool category #ruby link ↗

Code smell detector for Ruby.
0

PHP-Parser github.com
tool category #static-analysis link ↗

A PHP parser written in PHP.
0

flake8 github.com
tool category #python link ↗

A wrapper around pyflakes, pycodestyle and mccabe.
next page of items loading…