Static Analysis & Code Quality
535 items from analysis-tools-dev/static-analysis ★14,831
-
Trivy github.com
Aqua Security's open source simple and comprehensive vulnerability scanner for containers (suitable for CI).
-
ESLint github.com
The pluggable linting utility for JavaScript.
-
Deepfence Threat Mapper github.com
Powerful runtime vulnerability scanner for kubernetes, virtual machines and serverless.
-
angr github.com
Binary code analysis tool that also supports symbolic execution.
-
Gitleaks github.com
A SAST tool for detecting hardcoded secrets like passwords, api keys, and tokens in git repos.
-
pyright github.com
Fast type checker meant for large Python source bases. It can run in a “watch” mode and performs fast incremental updates when files are modified.
-
Grype github.com
A vulnerability scanner for container images, filesystems and SBOMs.
-
SwiftFormat github.com
A code library and command-line formatting tool for reformatting Swift code.
-
rustfmt github.com
Rust code formatter maintained by the Rust team and included in cargo
-
cwe_checker github.com
cwe_checker finds vulnerable patterns in binary executables.
-
proselint github.com
A linter for English prose with a focus on writing style instead of grammar.
-
TypeScript ESLint github.com
TypeScript language extension for eslint.
-
bundler-audit github.com
Audit Gemfile.lock for gems with security vulnerabilities reported in Ruby Advisory Database.
-
clair github.com
Vulnerability Static Analysis for Containers.
-
Tsunami Security Scanner github.com
A general purpose network security scanner with an extensible plugin system for detecting high severity RCE-like vulnerabilities with high confidence. Custom detectors for finding vulnerabilities (e.g. open APIs) can be added.
-
XO github.com
Enforce strict code style using the JavaScript happiness style.
-
Angular github.com
Linting rules for Angular (v2+).
-
bullet github.com
Help to kill N+1 queries and unused eager loading.
-
.NET Compiler Platform ("Roslyn") Analyzers github.com
Roslyn-based implementation of FxCop analyzers.
-
tfsec github.com
Terraform static analysis tool that prevents potential security issues by checking cloud misconfigurations at build time and directly integrates with the HCL parser for better results. Checks for violations of AWS, Azure and GCP security best practice recommendations.
-
PHP Insights github.com
Instant PHP quality checks from your console. Analysis of code quality and coding style as well as overview of code architecture and its complexity.
-
oxc github.com
The Oxidation Compiler is creating a suite of high-performance tools for the JavaScript / TypeScript language re-written in Rust.
-
credo github.com
A static code analysis tool with a focus on code consistency and teaching Elixir. (Docs).
-
Manalyze github.com
A static analyzer, which checks portable executables for malicious content.
-
vulture github.com
Find unused classes, functions and variables in Python code.
-
detect-secrets github.com
An enterprise friendly way of detecting and preventing secrets in code. It does this by running periodic diff outputs against heuristically crafted regex statements, to identify whether any new secret has been committed. This way, it avoids the overhead of digging through all…
-
DevSkim github.com
Regex-based static analysis tool for Visual Studio, VS Code, and Sublime Text - C/C++, C#, PHP, ASP, Python, Ruby, Java, and others.
-
Reek github.com
Code smell detector for Ruby.
-
PHP-Parser github.com
A PHP parser written in PHP.
-
flake8 github.com
A wrapper around pyflakes, pycodestyle and mccabe.
- next page of items loading…
