static-analysis

There are 171 repositories under static-analysis topic.

koalaman / shellcheck
ShellCheck, a static analysis tool for shell scripts
bash developer-tools haskell linter shell static-analysis
Language:Haskell 35132
ImHex
WerWolv / ImHex
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
analyzer binary-analysis c-plus-plus cybersecurity dark-mode dear-imgui disassembler forensics hacking hacktoberfest hex-editor ips mathematical-evaluator multi-platform pattern-language preprocessor reverse-engineering static-analysis windows
Language:C++ 33176
astral-sh / ruff
An extremely fast Python linter and code formatter, written in Rust.
linter pep8 python python3 ruff rust rustpython static-analysis static-code-analysis style-guide styleguide
Language:Rust 27076
realm / SwiftLint
A tool to enforce Swift style and conventions.
linter linting swift static-analysis code-quality hacktoberfest
Language:Swift 18360
nikic / PHP-Parser
A PHP parser written in PHP
php parser ast static-analysis
Language:PHP 16847
Mobile-Security-Framework-MobSF
MobSF / Mobile-Security-Framework-MobSF
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
static-analysis dynamic-analysis mobsf android-security mobile-security windows-mobile-security ios-security api-testing web-security malware-analysis runtime-security devsecops apk rest cwe owasp mstg masvs mastg
Language:JavaScript 16415
facebook / infer
A static analyzer for Java, C, C++, and Objective-C
c code-quality cpp java objective-c static-analysis static-code-analysis
Language:OCaml 14733
Konloch / bytecode-viewer
A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)
java-decompiler apk java procyon cfr fernflower krakatau bytecode-viewer bytecode smali baksmali dex2jar decompiler recompiler compiler war jsp static-analysis android
Language:Java 14377
static-analysis
analysis-tools-dev / static-analysis
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
static-analysis static-analyzers linter code-quality awesome-list static-code-analysis sast analysis
Language:Rust 12926
PHP-CS-Fixer
PHP-CS-Fixer / PHP-CS-Fixer
A tool to automatically fix PHP Coding Standards issues
php static-analysis code-style code-standards
Language:PHP 12597
phpstan / phpstan
PHP Static Analysis Tool - discover bugs in your code without running it!
php php7 phpstan static-analysis static-analyzer static-code-analysis testing
Language:PHP 12581
ttroy50 / cmake-examples
Useful CMake Examples
cmake cpp tutorial clang cppcheck static-analysis clang-format unit-testing google-test catch boost cpack ctest
Language:CMake 12008
OWASP / owasp-mastg
The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).
mobile-app pentesting android-application ios-app runtime-analysis network-analysis static-analysis reverse-engineering dynamic-analysis mobile-security android ios hacking reverse-enginnering mstg testing-cryptography compliancy-checklist mast mastg
Language:Python 11321
rshipp / awesome-malware-analysis
Defund the Police.
malware-analysis awesome awesome-list list malware-samples analysis-framework dynamic-analysis static-analysis threat-intelligence automated-analysis domain-analysis network-traffic threatintel malware-collection malware-research threat-sharing chinese-translation chinese drop-ice
11119
squizlabs / PHP_CodeSniffer
PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards.
automation cli coding-standards php qa static-analysis
Language:PHP 10607
quay / clair
Vulnerability Static Analysis for Containers
containers static-analysis go kubernetes docker oci oci-image vulnerabilities clair
Language:Go 10063
semgrep
semgrep / semgrep
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
static-analysis static-code-analysis java go sast semgrep r2c c python ruby javascript typescript
Language:OCaml 9815
hadolint / hadolint
Dockerfile linter, validate inline bash, written in Haskell
docker dockerfile dockerfile-linter haskell linter shellcheck static-analysis
Language:Haskell 9792
SonarSource / sonarqube
Continuous Inspection
sonarqube code-quality static-analysis
Language:Java 8623
checkstyle
checkstyle / checkstyle
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
java static-code-analysis command-line-tool static-analysis code-quality
Language:Java 8149
Scanners-Box
We5ter / Scanners-Box
A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑
pentesting-tools hacker-tools vulnerability-scanners information-security redteam-tools penetration-testing devsecops security-automation smart-contracts privacy-compliance apk-analysis binary-analysis exploitation-framework malware-analysis security-audit code-analyzer static-analysis wifi-hacking wifi-security
8010
grype
anchore / grype
A vulnerability scanner for container images and filesystems
containers security vulnerability docker golang go static-analysis container-image tool oci cyclonedx vulnerabilities hacktoberfest openvex vex
Language:Go 7858
securego / gosec
Go security checker
golang security security-tools security-automation static-analysis static-code-analysis
Language:Go 7493
reviewdog
reviewdog / reviewdog
🐶 Automated code review tool integrated with any code analysis tools regardless of programming language
linter go lint ci code-review github gitlab codereview cli code-quality static-analysis static-code-analysis bitbucket
Language:Go 7416
brakeman
presidentbeef / brakeman
A static analysis security vulnerability scanner for Ruby on Rails applications
ruby rails security static-analysis vulnerabilities brakeman security-vulnerability security-tools security-audit
Language:Ruby 6918
google / error-prone
Catch common Java mistakes as compile-time errors
java static-analysis
Language:Java 6732
facebook / pyre-check
Performant type-checking for python.
python typechecker type-check static-analysis ocaml code-quality abstract-interpretation security program-analysis taint-analysis control-flow-analysis
Language:OCaml 6698
Detect-It-Easy
horsicq / Detect-It-Easy
Program for determining types of files for Windows, Linux and MacOS.
debugger detect unpacker disassembler reverse-engineering elf packer detector binary-analysis program-analysis static-analysis entropy malware-analysis malware-research macho mach-o hacktoberfest pentest scanner hacktoberfest2023
Language:JavaScript 6662
tfsec
aquasecurity / tfsec
Security scanner for your Terraform code
terraform security scanner static-analysis ci aws azure google-cloud-platform compliance infrastructure-as-code devsecops vulnerability-scanners misconfiguration digitalocean devops linter go terraform-security hacktoberfest
Language:Go 6583
bridgecrewio / checkov
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
terraform static-analysis aws gcp azure aws-security cloudformation scans compliance kubernetes infrastructure-as-code devops hacktoberfest
Language:Python 6579
detekt
detekt / detekt
Static code analysis for Kotlin
analysis code-quality codesmells gradle-plugin hacktoberfest kotlin lint linter static static-analysis
Language:Kotlin 6067
ast-grep
ast-grep / ast-grep
⚡A CLI tool for code structural search, lint and rewriting. Written in Rust
codemod linter ast babel command-line command-line-tool grep tree-sitter codereview rust static-analysis typescript refactoring search structural-search
Language:Rust 6020
go-tools
dominikh / go-tools
Staticcheck - The advanced Go linter
linter linters sponsor static-analysis staticcheck
Language:Go 5933
palantir / tslint
:vertical_traffic_light: An extensible linter for the TypeScript language
typescript linting-rules linter tslint static-analysis octo-correct-managed
Language:TypeScript 5909
ondrajz / go-callvis
Visualize call graph of a Go program using Graphviz
callgraph graphviz visualization golang golang-tools static-analysis awesome-go
Language:Go 5757
davidhalter / jedi
Awesome autocompletion, static analysis and refactoring library for python
auto-complete python refactoring static-analysis type-inference
Language:Python 5684