GCC
The GCC compiler has static analysis capabilities since version 10. This option is only available if GCC was configured with analyzer support enabled. It can also output its diagnostics to a JSON file in the SARIF format (from v13).
- from
- Static Analysis & Code Quality
- added
- 2026-10-10
- likes
- 0
similar
-
ast-metrics github.com
Static code analyzer for Go and other languages: complexity, coupling, cohesion and maintainability metrics, with HTML, JSON, Markdown and SARIF reports.
-
CScout spinellis.gr
Complexity and quality metrics for C and C preprocessor code.
-
Helix QAC perforce.com
copyright: — Enterprise-grade static analysis for embedded software. Supports MISRA, CERT, and AUTOSAR coding standards.
-
cppcheck github.com
Static analysis of C/C++ code.
-
OpenStaticAnalyzer github.com
OpenStaticAnalyzer is a source code analyzer tool, which can perform deep static analysis of the source code of complex systems.
-
ansible-security-scanner github.com
Static analyzer for playbooks, roles and collections covering hardcoded credentials, RCE, and supply-chain risks. Outputs SARIF, CycloneDX SBOM and GitLab SAST.
Static Analysis & Code Quality › Programming Languages: “The GCC compiler has static analysis capabilities since version 10. This option is only available if GCC was configured with analyzer support enabled. It can also output its diagnostics to a JSON file in the SARIF format (from v13).”