GitHub topics: static-analysis
ghik/zerowaste
Scala compiler plugin to detect unused expressions
Language: Scala - Size: 86.9 KB - Last synced at: 26 minutes ago - Pushed at: about 1 hour ago - Stars: 65 - Forks: 12

OWASP/owasp-mastg
The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).
Language: Python - Size: 745 MB - Last synced at: about 2 hours ago - Pushed at: about 2 hours ago - Stars: 12,263 - Forks: 2,443

jenkinsci/warnings-ng-plugin
Jenkins Warnings Plugin - Next Generation
Language: Java - Size: 27 MB - Last synced at: about 4 hours ago - Pushed at: about 4 hours ago - Stars: 345 - Forks: 284

jenkinsci/analysis-model
A library to read static analysis reports into a Java object model
Language: Java - Size: 13.4 MB - Last synced at: about 4 hours ago - Pushed at: about 4 hours ago - Stars: 85 - Forks: 187

t7dela/ShadowTool
This script is designed to automatically generate seed phrases and check balances for Tron networks. If a wallet with a non-zero balance is found, the wallet's information (address, mnemonic, private key, and balances) is logged and saved to a file named result.txt.
Language: C++ - Size: 974 KB - Last synced at: about 4 hours ago - Pushed at: about 4 hours ago - Stars: 1 - Forks: 1

securesauce/precli
Precaution CLI - command line static application security testing tool
Language: Python - Size: 2.53 MB - Last synced at: about 6 hours ago - Pushed at: about 7 hours ago - Stars: 24 - Forks: 3

spotbugs/spotbugs
SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
Language: Java - Size: 140 MB - Last synced at: about 7 hours ago - Pushed at: about 8 hours ago - Stars: 3,666 - Forks: 622

jar-analyzer/jar-analyzer
Jar Analyzer - 一个JAR包分析工具,批量分析,SCA漏洞分析,方法调用关系搜索,字符串搜索,Spring组件分析,信息泄露检查,CFG程序分析,JVM栈帧分析,进阶表达式搜索,字节码指令级的动态调试分析,反编译JAR包一键导出,一键提取序列化数据恶意代码,一键分析BCEL字节码
Language: Java - Size: 84.4 MB - Last synced at: about 8 hours ago - Pushed at: about 8 hours ago - Stars: 1,503 - Forks: 139

uber-go/nilaway
Static analysis tool to detect potential nil panics in Go code
Language: Go - Size: 918 KB - Last synced at: about 11 hours ago - Pushed at: about 11 hours ago - Stars: 3,387 - Forks: 75

jpetrucciani/ruff-check
github action to run ruff on your repo
Language: Dockerfile - Size: 146 KB - Last synced at: about 10 hours ago - Pushed at: about 11 hours ago - Stars: 13 - Forks: 1

horsicq/Detect-It-Easy
Program for determining types of files for Windows, Linux and MacOS.
Language: JavaScript - Size: 15.3 MB - Last synced at: about 15 hours ago - Pushed at: about 15 hours ago - Stars: 8,803 - Forks: 809

mgechev/revive
🔥 ~6x faster, stricter, configurable, extensible, and beautiful drop-in replacement for golint
Language: Go - Size: 6.32 MB - Last synced at: about 17 hours ago - Pushed at: about 18 hours ago - Stars: 5,182 - Forks: 297

stinb/UnderstandForVSCode
VS Code extension for Understand
Language: TypeScript - Size: 9.17 MB - Last synced at: about 18 hours ago - Pushed at: about 19 hours ago - Stars: 3 - Forks: 0

uhafner/autograding-github-action
GitHub Action to autograde projects based on a configurable set of metrics
Language: Java - Size: 26.7 MB - Last synced at: about 18 hours ago - Pushed at: about 19 hours ago - Stars: 27 - Forks: 6

lisa-analyzer/lisa
📚 a modular easy to use Library for Static Analysis aiming at multi-language analysis
Language: Java - Size: 8.68 MB - Last synced at: about 19 hours ago - Pushed at: about 20 hours ago - Stars: 61 - Forks: 34

tanprathan/MobileApp-Pentest-Cheatsheet
The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
Size: 333 KB - Last synced at: about 8 hours ago - Pushed at: over 1 year ago - Stars: 4,931 - Forks: 1,289

RalfKoban/MiKo-Analyzers
Provides analyzers that are based on the .NET Compiler Platform.
Language: C# - Size: 14.2 MB - Last synced at: about 20 hours ago - Pushed at: about 20 hours ago - Stars: 13 - Forks: 1

staabm/staabm.github.io
Personal blog, about my open source activies.
Language: HTML - Size: 26.7 MB - Last synced at: about 21 hours ago - Pushed at: about 21 hours ago - Stars: 7 - Forks: 2

checkstyle/checkstyle
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
Language: Java - Size: 191 MB - Last synced at: about 21 hours ago - Pushed at: about 22 hours ago - Stars: 8,591 - Forks: 3,839

bridgecrewio/checkov
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Language: Python - Size: 89.5 MB - Last synced at: about 23 hours ago - Pushed at: about 24 hours ago - Stars: 7,605 - Forks: 1,199

hadolint/hadolint
Dockerfile linter, validate inline bash, written in Haskell
Language: Haskell - Size: 3.7 MB - Last synced at: about 23 hours ago - Pushed at: 2 months ago - Stars: 11,159 - Forks: 448

flipstone/henforcer
Haskell Enforcer of user specified code standards
Language: Haskell - Size: 186 KB - Last synced at: about 24 hours ago - Pushed at: 1 day ago - Stars: 5 - Forks: 1

Ericsson/codechecker
CodeChecker is an analyzer tooling, defect database and viewer extension for static and dynamic analyzer tools.
Language: Python - Size: 42.3 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 2,397 - Forks: 415

kynaan5353/cargo-recon
Enumerate viable fuzzing targets in Rust code
Language: Rust - Size: 10.7 KB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 0 - Forks: 0

slackhq/hakana
Another typechecker for Hack, built by Slack
Language: Rust - Size: 4.98 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 78 - Forks: 7

gmh5225/awesome-llvm-security
awesome llvm security [Welcome to PR]
Size: 410 KB - Last synced at: 1 day ago - Pushed at: 2 days ago - Stars: 707 - Forks: 90

SonarSource/sonar-dotnet
Code analyzer for C# and VB.NET projects
Language: C# - Size: 138 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 842 - Forks: 231

WayibKahil/Numerical-Analysis-App
A Python desktop application for solving mathematical equations using various numerical methods. This interactive tool provides a modern GUI for inputting equations and visualizing results through interactive plots. Features include solution history tracking, customizable settings, and PDF export capabilities.
Language: Python - Size: 126 KB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 0 - Forks: 0

anchore/syft
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
Language: Go - Size: 21.6 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 7,089 - Forks: 664

BraisGabin/detekt-junit-rules
Detekt rules to avoid common mistakes while using JUnit4 or JUnit5
Language: Kotlin - Size: 326 KB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 5 - Forks: 0

quora/pyanalyze
A Python type checker
Language: Python - Size: 2.55 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 365 - Forks: 38

HikaruEgashira/vulnhuntrs
Alternative vulnhuntr + Rust implementation + tree-sitter multilingual support
Language: Rust - Size: 1.63 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 31 - Forks: 2

PHP-CS-Fixer/PHP-CS-Fixer
A tool to automatically fix PHP Coding Standards issues
Language: PHP - Size: 33.8 MB - Last synced at: 1 day ago - Pushed at: 7 days ago - Stars: 13,174 - Forks: 1,600

semgrep/semgrep-rules
Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.
Language: HCL - Size: 9.71 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 920 - Forks: 445

google/pytype
A static type analyzer for Python code
Language: Python - Size: 42.4 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 4,897 - Forks: 287

rrrene/credo
A static code analysis tool for the Elixir language with a focus on code consistency and teaching.
Language: Elixir - Size: 5.16 MB - Last synced at: 1 day ago - Pushed at: about 2 months ago - Stars: 5,004 - Forks: 427

qltysh/qlty
💎 Code quality CLI for universal linting, auto-formatting, security scanning, and maintainability
Language: Rust - Size: 4.18 MB - Last synced at: about 19 hours ago - Pushed at: about 19 hours ago - Stars: 2,655 - Forks: 253

kaosagnt/useful-utilities
Useful Un*x / BSD / macOS utilities
Language: Shell - Size: 56.6 KB - Last synced at: 1 day ago - Pushed at: 2 days ago - Stars: 5 - Forks: 1

opalj/opal
Language: Scala - Size: 713 MB - Last synced at: 1 day ago - Pushed at: 2 days ago - Stars: 60 - Forks: 29

davidhalter/jedi
Awesome autocompletion, static analysis and refactoring library for python
Language: Python - Size: 12.5 MB - Last synced at: 1 day ago - Pushed at: 3 months ago - Stars: 5,948 - Forks: 518

Contrast-Security-OSS/contrastscan-action
Contrast Scan GitHub action
Size: 125 KB - Last synced at: about 8 hours ago - Pushed at: 10 months ago - Stars: 21 - Forks: 4

Bearer/bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Language: Go - Size: 23.9 MB - Last synced at: about 1 hour ago - Pushed at: 18 days ago - Stars: 2,305 - Forks: 122

praetorian-inc/gokart 📦
A static analysis tool for securing Go code
Language: Go - Size: 189 KB - Last synced at: 1 day ago - Pushed at: over 1 year ago - Stars: 2,178 - Forks: 107

Auditware/radar
A static analysis tool for anchor rust programs.
Language: Python - Size: 655 KB - Last synced at: 1 day ago - Pushed at: 2 days ago - Stars: 88 - Forks: 10

ZupIT/horusec
Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.
Language: Go - Size: 73.9 MB - Last synced at: about 10 hours ago - Pushed at: about 11 hours ago - Stars: 1,226 - Forks: 197

elazarg/pythia
Pointer Analysis of CPython Bytecode using Abstract Interpretation
Language: Python - Size: 1.35 MB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 7 - Forks: 0

protectai/vulnhuntr
Zero shot vulnerability discovery using LLMs
Language: Python - Size: 119 KB - Last synced at: 1 day ago - Pushed at: 4 months ago - Stars: 1,801 - Forks: 192

danmar/cppcheck
static analysis of C/C++ code
Language: C++ - Size: 162 MB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 6,181 - Forks: 1,493

SonarSource/sonar-java
:coffee: SonarSource Static Analyzer for Java Code Quality and Security
Language: Java - Size: 66.6 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 1,166 - Forks: 694

SonarSource/SonarJS
SonarSource Static Analyzer for JavaScript and TypeScript
Language: TypeScript - Size: 79.4 MB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 1,108 - Forks: 185

z0mb13w4r/objtools
next-gen replacement for readelf, objdump and objcopy.
Language: C - Size: 802 KB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 0 - Forks: 0

phpstan/phpstan-strict-rules
Extra strict and opinionated rules for PHPStan
Language: PHP - Size: 388 KB - Last synced at: 1 day ago - Pushed at: about 2 months ago - Stars: 649 - Forks: 51

uber/NullAway
A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead
Language: Java - Size: 6.68 MB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 3,763 - Forks: 303

Tai-e/Tai-e-Template
Scaffolding project that uses Tai-e as a dependency.
Language: Java - Size: 210 KB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 6 - Forks: 0

bl4de/security-tools
My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.
Language: Python - Size: 35.2 MB - Last synced at: 1 day ago - Pushed at: about 1 month ago - Stars: 883 - Forks: 176

realm/SwiftLint
A tool to enforce Swift style and conventions.
Language: Swift - Size: 899 MB - Last synced at: 1 day ago - Pushed at: 11 days ago - Stars: 19,009 - Forks: 2,251

zizmorcore/zizmor
Static analysis for GitHub Actions
Language: Rust - Size: 1.73 MB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 2,661 - Forks: 78

meowesque/catk
C Analysis Toolkit
Language: Rust - Size: 61.5 KB - Last synced at: about 14 hours ago - Pushed at: about 1 month ago - Stars: 4 - Forks: 1

SonarSource/sonarqube-webapp
SonarQube Community Build Web App
Language: TypeScript - Size: 74.5 MB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 4 - Forks: 3

yonasBSD/code-pathfinder Fork of shivasurya/code-pathfinder
Code Pathfinder, the open-source alternative to GitHub CodeQL built with GoLang. Built for advanced structural search, derive insights, find vulnerabilities in code.
Language: Go - Size: 10.3 MB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 0 - Forks: 0

yonasBSD/sonarqube Fork of SonarSource/sonarqube
Continuous Inspection
Language: Java - Size: 847 MB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 0 - Forks: 0

yonasBSD/codeql Fork of github/codeql
CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
Language: CodeQL - Size: 352 MB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 0 - Forks: 0

SonarSource/sonarqube
Continuous Inspection
Language: Java - Size: 916 MB - Last synced at: 2 days ago - Pushed at: 3 days ago - Stars: 9,631 - Forks: 2,078

rubocop/rubocop-capybara
Code style checking for Capybara files.
Language: Ruby - Size: 981 KB - Last synced at: about 10 hours ago - Pushed at: 2 days ago - Stars: 45 - Forks: 10

cqfn/aibolit
A Static Analyzer for Java Powered by Machine Learning: Identifies Anti-Patterns Begging for Refactoring
Language: Java - Size: 108 MB - Last synced at: 2 days ago - Pushed at: 3 days ago - Stars: 77 - Forks: 26

safedep/vet
Next Generation Software Composition Analysis (SCA) with Malicious Package Detection, Code Context & Policy as Code
Language: Go - Size: 11.3 MB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 429 - Forks: 43

facebook/pyre-check
Performant type-checking for python.
Language: OCaml - Size: 471 MB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 7,032 - Forks: 450

codegen-sh/graph-sitter
Scriptable interface to a powerful, multi-lingual language server
Language: Python - Size: 25.1 MB - Last synced at: 2 days ago - Pushed at: 3 days ago - Stars: 5 - Forks: 1

dsherret/ts-morph
TypeScript Compiler API wrapper for static analysis and programmatic code changes.
Language: TypeScript - Size: 24.7 MB - Last synced at: 2 days ago - Pushed at: 18 days ago - Stars: 5,439 - Forks: 210

ise-uiuc/KNighter
Automatic checker synthesis for system-level static analysis
Language: C++ - Size: 3.33 MB - Last synced at: about 10 hours ago - Pushed at: 24 days ago - Stars: 17 - Forks: 2

MobSF/mobsfscan
mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.
Language: Python - Size: 331 KB - Last synced at: 1 day ago - Pushed at: 4 months ago - Stars: 664 - Forks: 108

google/error-prone
Catch common Java mistakes as compile-time errors
Language: Java - Size: 146 MB - Last synced at: 2 days ago - Pushed at: 3 days ago - Stars: 6,991 - Forks: 756

detekt/detekt
Static code analysis for Kotlin
Language: Kotlin - Size: 150 MB - Last synced at: 1 day ago - Pushed at: 3 days ago - Stars: 6,515 - Forks: 797

quay/clair
Vulnerability Static Analysis for Containers
Language: Go - Size: 34.4 MB - Last synced at: 2 days ago - Pushed at: 3 days ago - Stars: 10,652 - Forks: 1,182

quay/claircore
foundation modules for scanning container packages and reporting vulnerabilities
Language: Go - Size: 53.5 MB - Last synced at: 2 days ago - Pushed at: 3 days ago - Stars: 147 - Forks: 85

phpstan/phpstan-deprecation-rules
PHPStan rules for detecting usage of deprecated classes, methods, properties, constants and traits.
Language: PHP - Size: 248 KB - Last synced at: 1 day ago - Pushed at: 23 days ago - Stars: 410 - Forks: 20

reviewdog/reviewdog
🐶 Automated code review tool integrated with any code analysis tools regardless of programming language
Language: Go - Size: 5 MB - Last synced at: 2 days ago - Pushed at: 3 days ago - Stars: 8,438 - Forks: 445

phpstan/phpstan
PHP Static Analysis Tool - discover bugs in your code without running it!
Language: PHP - Size: 6.14 GB - Last synced at: 2 days ago - Pushed at: 3 days ago - Stars: 13,401 - Forks: 921

secrary/Andromeda
Andromeda - Interactive Reverse Engineering Tool for Android Applications
Language: C++ - Size: 416 KB - Last synced at: about 9 hours ago - Pushed at: about 5 years ago - Stars: 709 - Forks: 74

georgeflour/makeathon
This project generates optimal bundles of products using both AI and Optimisation Methods
Language: TypeScript - Size: 64.1 MB - Last synced at: 3 days ago - Pushed at: 3 days ago - Stars: 0 - Forks: 1

gitleaks/gitleaks-action
Protect your secrets using Gitleaks-Action
Language: JavaScript - Size: 2.65 MB - Last synced at: 1 day ago - Pushed at: about 2 months ago - Stars: 396 - Forks: 146

vimeo/psalm
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications
Language: PHP - Size: 110 MB - Last synced at: 1 day ago - Pushed at: 5 days ago - Stars: 5,680 - Forks: 681

anchore/grype
A vulnerability scanner for container images and filesystems
Language: Go - Size: 6.56 MB - Last synced at: 3 days ago - Pushed at: 3 days ago - Stars: 9,937 - Forks: 636

phpstan/phpstan-doctrine
Doctrine extensions for PHPStan
Language: PHP - Size: 1.18 MB - Last synced at: 1 day ago - Pushed at: 21 days ago - Stars: 634 - Forks: 105

aviatesk/JET.jl
An experimental code analyzer for Julia. No need for additional type annotations.
Language: Julia - Size: 23.8 MB - Last synced at: about 16 hours ago - Pushed at: about 17 hours ago - Stars: 788 - Forks: 33

nvlinh99/ai-code-reviewer
🔍 Automated GPT-4-powered code reviews for GitLab Merge Requests. Inline comments, auto-fix suggestions, feedback dashboard, and CI/CD integration
Language: Python - Size: 27.3 KB - Last synced at: 2 days ago - Pushed at: 3 days ago - Stars: 0 - Forks: 0

TDacik/Deadlock_and_Racer
Frama-C plugins for deadlock and data race detection
Language: OCaml - Size: 813 KB - Last synced at: 2 days ago - Pushed at: 3 days ago - Stars: 12 - Forks: 2

microsoft/sarif-tutorials
User-friendly documentation for the SARIF file format.
Size: 201 KB - Last synced at: 1 day ago - Pushed at: over 1 year ago - Stars: 306 - Forks: 57

shivammathur/setup-php
GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and various tools.
Language: TypeScript - Size: 25.4 MB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 3,050 - Forks: 379

anchore/grant
Search an SBOM for licenses and the packages they belong to
Language: Go - Size: 802 KB - Last synced at: 2 days ago - Pushed at: 3 days ago - Stars: 90 - Forks: 7

tiobe/JuliaCheck
Code checker for Julia language
Language: Julia - Size: 161 KB - Last synced at: 3 days ago - Pushed at: 3 days ago - Stars: 0 - Forks: 0

PyCQA/vscode-bandit
A Visual Studio Code extension with support for the Bandit static analysis tool.
Language: Python - Size: 1.65 MB - Last synced at: about 11 hours ago - Pushed at: 3 days ago - Stars: 4 - Forks: 1

facebook/infer
A static analyzer for Java, C, C++, and Objective-C
Language: OCaml - Size: 191 MB - Last synced at: 2 days ago - Pushed at: 3 days ago - Stars: 15,228 - Forks: 2,031

vojtech-dobes/phpstan-php-graphql-server-nette-integration
Language: PHP - Size: 20.5 KB - Last synced at: 3 days ago - Pushed at: 3 days ago - Stars: 0 - Forks: 0

tokiwa-software/fuzion
The Fuzion Language Implementation
Language: Java - Size: 21.6 MB - Last synced at: 3 days ago - Pushed at: 3 days ago - Stars: 54 - Forks: 12

vojtech-dobes/phpstan-php-graphql-server
Language: PHP - Size: 25.4 KB - Last synced at: 3 days ago - Pushed at: 3 days ago - Stars: 0 - Forks: 0

UMR-CNRM/pyfortool
Python FORTRAN tool
Language: Python - Size: 64.7 MB - Last synced at: 3 days ago - Pushed at: 3 days ago - Stars: 2 - Forks: 3

vercel/nft
Node.js dependency tracing utility
Language: JavaScript - Size: 4.04 MB - Last synced at: 3 days ago - Pushed at: 3 days ago - Stars: 1,447 - Forks: 155

CarrotManMatt/ccft-pymarkdown
A Python wrapper around jackdewinter's PyMarkdown linter to suppress errors, caused by custom-formatted tables in Markdown files
Language: Python - Size: 314 KB - Last synced at: 3 days ago - Pushed at: 3 days ago - Stars: 1 - Forks: 0

iarsystems/arm
IAR Build Tools for Arm
Size: 21.5 KB - Last synced at: 3 days ago - Pushed at: 3 days ago - Stars: 4 - Forks: 0
