static-code-analysis
There are 66 repositories under static-code-analysis topic.
- Language:JavaScript 27138
- Language:JavaScript 20788
- Language:OCaml 13357
rubocop / rubocop
A Ruby static code analyzer and formatter, based on the community Ruby style guide.
Language:Ruby 11832- Language:Nunjucks 11110
- static-analysis
analysis-tools-dev / static-analysis
⚙️ A curated list of static analysis (SAST) tools for all programming languages, config files, build tools, and more.
Language:Rust 10025 - checkstyle
checkstyle / checkstyle
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
Language:Java 7119 - semgrep
returntocorp / semgrep
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Language:OCaml 6741 - Language:Go 6123
- datree
datreeio / datree
Prevent Kubernetes misconfigurations from reaching production (again 😤 )! From code to production, Datree provides an E2E policy enforcement solution to run automatic checks for rule violations. See our docs: https://hub.datree.io
Language:Go 5600 phan / phan
Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.
Language:PHP 5281- reviewdog
reviewdog / reviewdog
🐶 Automated code review tool integrated with any code analysis tools regardless of programming language
Language:Go 5209 - Language:Python 4262
- Language:Python 4058
- Language:Java 3892
- Language:Python 3779
- revive
mgechev / revive
🔥 ~6x faster, stricter, configurable, extensible, and beautiful drop-in replacement for golint
Language:Go 3564 uber / NullAway
A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead
Language:Java 3130spotbugs / spotbugs
SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
Language:Java 2745- codelyzerLanguage:TypeScript 2436
codeclimate / codeclimate
Code Climate CLI
Language:Ruby 2325standard / eslint-config-standard
ESLint Config for JavaScript Standard Style
Language:JavaScript 2322PyCQA / flake8
flake8 is a python tool that glues together pycodestyle, pyflakes, mccabe, and third-party plugins to check the style and quality of some python code.
Language:Python 2118python-security / pyt
A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications
Language:Python 2082- gokart
praetorian-inc / gokart
A static analysis tool for securing Go code
Language:Go 1983 glebm / i18n-tasks
Manage translation and localization with static analysis, for Ruby i18n
Language:Ruby 1798- kube-score
zegl / kube-score
Kubernetes object analysis with recommendations for improved reliability and security
Language:Go 1791 rubberduck-vba / Rubberduck
Every programmer needs a rubberduck. COM add-in for the VBA & VB6 IDE (VBE).
Language:C# 1605- Language:C++ 1457
kalessil / phpinspectionsea
A Static Code Analyzer for PHP (a PhpStorm/Idea Plugin)
Language:Java 1316SonarSource / sonar-java
:coffee: SonarSource Static Analyzer for Java Code Quality and Security
Language:Java 907mysticatea / eslint-plugin-node
Additional ESLint's rules for Node.js
Language:JavaScript 871SonarSource Static Analyzer for JavaScript and TypeScript
Language:TypeScript 825phpstan / phpdoc-parser
Next-gen phpDoc parser with support for intersection types and generics
Language:PHP 799security-code-scan / security-code-scan
Vulnerability Patterns Detector for C# and VB.NET
Language:C# 755vincentcox / StaCoAn
StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
Language:JavaScript 755
