An open API service providing repository metadata for many open source software ecosystems.

GitHub topics: static-analysis

ghik/zerowaste

Scala compiler plugin to detect unused expressions

Language: Scala - Size: 86.9 KB - Last synced at: 26 minutes ago - Pushed at: about 1 hour ago - Stars: 65 - Forks: 12

OWASP/owasp-mastg

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

Language: Python - Size: 745 MB - Last synced at: about 2 hours ago - Pushed at: about 2 hours ago - Stars: 12,263 - Forks: 2,443

jenkinsci/warnings-ng-plugin

Jenkins Warnings Plugin - Next Generation

Language: Java - Size: 27 MB - Last synced at: about 4 hours ago - Pushed at: about 4 hours ago - Stars: 345 - Forks: 284

jenkinsci/analysis-model

A library to read static analysis reports into a Java object model

Language: Java - Size: 13.4 MB - Last synced at: about 4 hours ago - Pushed at: about 4 hours ago - Stars: 85 - Forks: 187

t7dela/ShadowTool

This script is designed to automatically generate seed phrases and check balances for Tron networks. If a wallet with a non-zero balance is found, the wallet's information (address, mnemonic, private key, and balances) is logged and saved to a file named result.txt.

Language: C++ - Size: 974 KB - Last synced at: about 4 hours ago - Pushed at: about 4 hours ago - Stars: 1 - Forks: 1

securesauce/precli

Precaution CLI - command line static application security testing tool

Language: Python - Size: 2.53 MB - Last synced at: about 6 hours ago - Pushed at: about 7 hours ago - Stars: 24 - Forks: 3

spotbugs/spotbugs

SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.

Language: Java - Size: 140 MB - Last synced at: about 7 hours ago - Pushed at: about 8 hours ago - Stars: 3,666 - Forks: 622

jar-analyzer/jar-analyzer

Jar Analyzer - 一个JAR包分析工具,批量分析,SCA漏洞分析,方法调用关系搜索,字符串搜索,Spring组件分析,信息泄露检查,CFG程序分析,JVM栈帧分析,进阶表达式搜索,字节码指令级的动态调试分析,反编译JAR包一键导出,一键提取序列化数据恶意代码,一键分析BCEL字节码

Language: Java - Size: 84.4 MB - Last synced at: about 8 hours ago - Pushed at: about 8 hours ago - Stars: 1,503 - Forks: 139

uber-go/nilaway

Static analysis tool to detect potential nil panics in Go code

Language: Go - Size: 918 KB - Last synced at: about 11 hours ago - Pushed at: about 11 hours ago - Stars: 3,387 - Forks: 75

jpetrucciani/ruff-check

github action to run ruff on your repo

Language: Dockerfile - Size: 146 KB - Last synced at: about 10 hours ago - Pushed at: about 11 hours ago - Stars: 13 - Forks: 1

horsicq/Detect-It-Easy

Program for determining types of files for Windows, Linux and MacOS.

Language: JavaScript - Size: 15.3 MB - Last synced at: about 15 hours ago - Pushed at: about 15 hours ago - Stars: 8,803 - Forks: 809

mgechev/revive

🔥 ~6x faster, stricter, configurable, extensible, and beautiful drop-in replacement for golint

Language: Go - Size: 6.32 MB - Last synced at: about 17 hours ago - Pushed at: about 18 hours ago - Stars: 5,182 - Forks: 297

stinb/UnderstandForVSCode

VS Code extension for Understand

Language: TypeScript - Size: 9.17 MB - Last synced at: about 18 hours ago - Pushed at: about 19 hours ago - Stars: 3 - Forks: 0

uhafner/autograding-github-action

GitHub Action to autograde projects based on a configurable set of metrics

Language: Java - Size: 26.7 MB - Last synced at: about 18 hours ago - Pushed at: about 19 hours ago - Stars: 27 - Forks: 6

lisa-analyzer/lisa

📚 a modular easy to use Library for Static Analysis aiming at multi-language analysis

Language: Java - Size: 8.68 MB - Last synced at: about 19 hours ago - Pushed at: about 20 hours ago - Stars: 61 - Forks: 34

tanprathan/MobileApp-Pentest-Cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

Size: 333 KB - Last synced at: about 8 hours ago - Pushed at: over 1 year ago - Stars: 4,931 - Forks: 1,289

RalfKoban/MiKo-Analyzers

Provides analyzers that are based on the .NET Compiler Platform.

Language: C# - Size: 14.2 MB - Last synced at: about 20 hours ago - Pushed at: about 20 hours ago - Stars: 13 - Forks: 1

staabm/staabm.github.io

Personal blog, about my open source activies.

Language: HTML - Size: 26.7 MB - Last synced at: about 21 hours ago - Pushed at: about 21 hours ago - Stars: 7 - Forks: 2

checkstyle/checkstyle

Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.

Language: Java - Size: 191 MB - Last synced at: about 21 hours ago - Pushed at: about 22 hours ago - Stars: 8,591 - Forks: 3,839

bridgecrewio/checkov

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

Language: Python - Size: 89.5 MB - Last synced at: about 23 hours ago - Pushed at: about 24 hours ago - Stars: 7,605 - Forks: 1,199

hadolint/hadolint

Dockerfile linter, validate inline bash, written in Haskell

Language: Haskell - Size: 3.7 MB - Last synced at: about 23 hours ago - Pushed at: 2 months ago - Stars: 11,159 - Forks: 448

flipstone/henforcer

Haskell Enforcer of user specified code standards

Language: Haskell - Size: 186 KB - Last synced at: about 24 hours ago - Pushed at: 1 day ago - Stars: 5 - Forks: 1

Ericsson/codechecker

CodeChecker is an analyzer tooling, defect database and viewer extension for static and dynamic analyzer tools.

Language: Python - Size: 42.3 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 2,397 - Forks: 415

kynaan5353/cargo-recon

Enumerate viable fuzzing targets in Rust code

Language: Rust - Size: 10.7 KB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 0 - Forks: 0

slackhq/hakana

Another typechecker for Hack, built by Slack

Language: Rust - Size: 4.98 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 78 - Forks: 7

gmh5225/awesome-llvm-security

awesome llvm security [Welcome to PR]

Size: 410 KB - Last synced at: 1 day ago - Pushed at: 2 days ago - Stars: 707 - Forks: 90

SonarSource/sonar-dotnet

Code analyzer for C# and VB.NET projects

Language: C# - Size: 138 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 842 - Forks: 231

WayibKahil/Numerical-Analysis-App

A Python desktop application for solving mathematical equations using various numerical methods. This interactive tool provides a modern GUI for inputting equations and visualizing results through interactive plots. Features include solution history tracking, customizable settings, and PDF export capabilities.

Language: Python - Size: 126 KB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 0 - Forks: 0

anchore/syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

Language: Go - Size: 21.6 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 7,089 - Forks: 664

BraisGabin/detekt-junit-rules

Detekt rules to avoid common mistakes while using JUnit4 or JUnit5

Language: Kotlin - Size: 326 KB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 5 - Forks: 0

quora/pyanalyze

A Python type checker

Language: Python - Size: 2.55 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 365 - Forks: 38

HikaruEgashira/vulnhuntrs

Alternative vulnhuntr + Rust implementation + tree-sitter multilingual support

Language: Rust - Size: 1.63 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 31 - Forks: 2

PHP-CS-Fixer/PHP-CS-Fixer

A tool to automatically fix PHP Coding Standards issues

Language: PHP - Size: 33.8 MB - Last synced at: 1 day ago - Pushed at: 7 days ago - Stars: 13,174 - Forks: 1,600

semgrep/semgrep-rules

Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.

Language: HCL - Size: 9.71 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 920 - Forks: 445

google/pytype

A static type analyzer for Python code

Language: Python - Size: 42.4 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 4,897 - Forks: 287

rrrene/credo

A static code analysis tool for the Elixir language with a focus on code consistency and teaching.

Language: Elixir - Size: 5.16 MB - Last synced at: 1 day ago - Pushed at: about 2 months ago - Stars: 5,004 - Forks: 427

qltysh/qlty

💎 Code quality CLI for universal linting, auto-formatting, security scanning, and maintainability

Language: Rust - Size: 4.18 MB - Last synced at: about 19 hours ago - Pushed at: about 19 hours ago - Stars: 2,655 - Forks: 253

kaosagnt/useful-utilities

Useful Un*x / BSD / macOS utilities

Language: Shell - Size: 56.6 KB - Last synced at: 1 day ago - Pushed at: 2 days ago - Stars: 5 - Forks: 1

opalj/opal

Language: Scala - Size: 713 MB - Last synced at: 1 day ago - Pushed at: 2 days ago - Stars: 60 - Forks: 29

davidhalter/jedi

Awesome autocompletion, static analysis and refactoring library for python

Language: Python - Size: 12.5 MB - Last synced at: 1 day ago - Pushed at: 3 months ago - Stars: 5,948 - Forks: 518

Contrast-Security-OSS/contrastscan-action

Contrast Scan GitHub action

Size: 125 KB - Last synced at: about 8 hours ago - Pushed at: 10 months ago - Stars: 21 - Forks: 4

Bearer/bearer

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

Language: Go - Size: 23.9 MB - Last synced at: about 1 hour ago - Pushed at: 18 days ago - Stars: 2,305 - Forks: 122

praetorian-inc/gokart 📦

A static analysis tool for securing Go code

Language: Go - Size: 189 KB - Last synced at: 1 day ago - Pushed at: over 1 year ago - Stars: 2,178 - Forks: 107

Auditware/radar

A static analysis tool for anchor rust programs.

Language: Python - Size: 655 KB - Last synced at: 1 day ago - Pushed at: 2 days ago - Stars: 88 - Forks: 10

ZupIT/horusec

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

Language: Go - Size: 73.9 MB - Last synced at: about 10 hours ago - Pushed at: about 11 hours ago - Stars: 1,226 - Forks: 197

elazarg/pythia

Pointer Analysis of CPython Bytecode using Abstract Interpretation

Language: Python - Size: 1.35 MB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 7 - Forks: 0

protectai/vulnhuntr

Zero shot vulnerability discovery using LLMs

Language: Python - Size: 119 KB - Last synced at: 1 day ago - Pushed at: 4 months ago - Stars: 1,801 - Forks: 192

danmar/cppcheck

static analysis of C/C++ code

Language: C++ - Size: 162 MB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 6,181 - Forks: 1,493

SonarSource/sonar-java

:coffee: SonarSource Static Analyzer for Java Code Quality and Security

Language: Java - Size: 66.6 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 1,166 - Forks: 694

SonarSource/SonarJS

SonarSource Static Analyzer for JavaScript and TypeScript

Language: TypeScript - Size: 79.4 MB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 1,108 - Forks: 185

z0mb13w4r/objtools

next-gen replacement for readelf, objdump and objcopy.

Language: C - Size: 802 KB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 0 - Forks: 0

phpstan/phpstan-strict-rules

Extra strict and opinionated rules for PHPStan

Language: PHP - Size: 388 KB - Last synced at: 1 day ago - Pushed at: about 2 months ago - Stars: 649 - Forks: 51

uber/NullAway

A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead

Language: Java - Size: 6.68 MB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 3,763 - Forks: 303

Tai-e/Tai-e-Template

Scaffolding project that uses Tai-e as a dependency.

Language: Java - Size: 210 KB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 6 - Forks: 0

bl4de/security-tools

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

Language: Python - Size: 35.2 MB - Last synced at: 1 day ago - Pushed at: about 1 month ago - Stars: 883 - Forks: 176

realm/SwiftLint

A tool to enforce Swift style and conventions.

Language: Swift - Size: 899 MB - Last synced at: 1 day ago - Pushed at: 11 days ago - Stars: 19,009 - Forks: 2,251

zizmorcore/zizmor

Static analysis for GitHub Actions

Language: Rust - Size: 1.73 MB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 2,661 - Forks: 78

meowesque/catk

C Analysis Toolkit

Language: Rust - Size: 61.5 KB - Last synced at: about 14 hours ago - Pushed at: about 1 month ago - Stars: 4 - Forks: 1

SonarSource/sonarqube-webapp

SonarQube Community Build Web App

Language: TypeScript - Size: 74.5 MB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 4 - Forks: 3

yonasBSD/code-pathfinder Fork of shivasurya/code-pathfinder

Code Pathfinder, the open-source alternative to GitHub CodeQL built with GoLang. Built for advanced structural search, derive insights, find vulnerabilities in code.

Language: Go - Size: 10.3 MB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 0 - Forks: 0

yonasBSD/sonarqube Fork of SonarSource/sonarqube

Continuous Inspection

Language: Java - Size: 847 MB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 0 - Forks: 0

yonasBSD/codeql Fork of github/codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

Language: CodeQL - Size: 352 MB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 0 - Forks: 0

SonarSource/sonarqube

Continuous Inspection

Language: Java - Size: 916 MB - Last synced at: 2 days ago - Pushed at: 3 days ago - Stars: 9,631 - Forks: 2,078

rubocop/rubocop-capybara

Code style checking for Capybara files.

Language: Ruby - Size: 981 KB - Last synced at: about 10 hours ago - Pushed at: 2 days ago - Stars: 45 - Forks: 10

cqfn/aibolit

A Static Analyzer for Java Powered by Machine Learning: Identifies Anti-Patterns Begging for Refactoring

Language: Java - Size: 108 MB - Last synced at: 2 days ago - Pushed at: 3 days ago - Stars: 77 - Forks: 26

safedep/vet

Next Generation Software Composition Analysis (SCA) with Malicious Package Detection, Code Context & Policy as Code

Language: Go - Size: 11.3 MB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 429 - Forks: 43

facebook/pyre-check

Performant type-checking for python.

Language: OCaml - Size: 471 MB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 7,032 - Forks: 450

codegen-sh/graph-sitter

Scriptable interface to a powerful, multi-lingual language server

Language: Python - Size: 25.1 MB - Last synced at: 2 days ago - Pushed at: 3 days ago - Stars: 5 - Forks: 1

dsherret/ts-morph

TypeScript Compiler API wrapper for static analysis and programmatic code changes.

Language: TypeScript - Size: 24.7 MB - Last synced at: 2 days ago - Pushed at: 18 days ago - Stars: 5,439 - Forks: 210

ise-uiuc/KNighter

Automatic checker synthesis for system-level static analysis

Language: C++ - Size: 3.33 MB - Last synced at: about 10 hours ago - Pushed at: 24 days ago - Stars: 17 - Forks: 2

MobSF/mobsfscan

mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.

Language: Python - Size: 331 KB - Last synced at: 1 day ago - Pushed at: 4 months ago - Stars: 664 - Forks: 108

google/error-prone

Catch common Java mistakes as compile-time errors

Language: Java - Size: 146 MB - Last synced at: 2 days ago - Pushed at: 3 days ago - Stars: 6,991 - Forks: 756

detekt/detekt

Static code analysis for Kotlin

Language: Kotlin - Size: 150 MB - Last synced at: 1 day ago - Pushed at: 3 days ago - Stars: 6,515 - Forks: 797

quay/clair

Vulnerability Static Analysis for Containers

Language: Go - Size: 34.4 MB - Last synced at: 2 days ago - Pushed at: 3 days ago - Stars: 10,652 - Forks: 1,182

quay/claircore

foundation modules for scanning container packages and reporting vulnerabilities

Language: Go - Size: 53.5 MB - Last synced at: 2 days ago - Pushed at: 3 days ago - Stars: 147 - Forks: 85

phpstan/phpstan-deprecation-rules

PHPStan rules for detecting usage of deprecated classes, methods, properties, constants and traits.

Language: PHP - Size: 248 KB - Last synced at: 1 day ago - Pushed at: 23 days ago - Stars: 410 - Forks: 20

reviewdog/reviewdog

🐶 Automated code review tool integrated with any code analysis tools regardless of programming language

Language: Go - Size: 5 MB - Last synced at: 2 days ago - Pushed at: 3 days ago - Stars: 8,438 - Forks: 445

phpstan/phpstan

PHP Static Analysis Tool - discover bugs in your code without running it!

Language: PHP - Size: 6.14 GB - Last synced at: 2 days ago - Pushed at: 3 days ago - Stars: 13,401 - Forks: 921

secrary/Andromeda

Andromeda - Interactive Reverse Engineering Tool for Android Applications

Language: C++ - Size: 416 KB - Last synced at: about 9 hours ago - Pushed at: about 5 years ago - Stars: 709 - Forks: 74

georgeflour/makeathon

This project generates optimal bundles of products using both AI and Optimisation Methods

Language: TypeScript - Size: 64.1 MB - Last synced at: 3 days ago - Pushed at: 3 days ago - Stars: 0 - Forks: 1

gitleaks/gitleaks-action

Protect your secrets using Gitleaks-Action

Language: JavaScript - Size: 2.65 MB - Last synced at: 1 day ago - Pushed at: about 2 months ago - Stars: 396 - Forks: 146

vimeo/psalm

A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications

Language: PHP - Size: 110 MB - Last synced at: 1 day ago - Pushed at: 5 days ago - Stars: 5,680 - Forks: 681

anchore/grype

A vulnerability scanner for container images and filesystems

Language: Go - Size: 6.56 MB - Last synced at: 3 days ago - Pushed at: 3 days ago - Stars: 9,937 - Forks: 636

phpstan/phpstan-doctrine

Doctrine extensions for PHPStan

Language: PHP - Size: 1.18 MB - Last synced at: 1 day ago - Pushed at: 21 days ago - Stars: 634 - Forks: 105

aviatesk/JET.jl

An experimental code analyzer for Julia. No need for additional type annotations.

Language: Julia - Size: 23.8 MB - Last synced at: about 16 hours ago - Pushed at: about 17 hours ago - Stars: 788 - Forks: 33

nvlinh99/ai-code-reviewer

🔍 Automated GPT-4-powered code reviews for GitLab Merge Requests. Inline comments, auto-fix suggestions, feedback dashboard, and CI/CD integration

Language: Python - Size: 27.3 KB - Last synced at: 2 days ago - Pushed at: 3 days ago - Stars: 0 - Forks: 0

TDacik/Deadlock_and_Racer

Frama-C plugins for deadlock and data race detection

Language: OCaml - Size: 813 KB - Last synced at: 2 days ago - Pushed at: 3 days ago - Stars: 12 - Forks: 2

microsoft/sarif-tutorials

User-friendly documentation for the SARIF file format.

Size: 201 KB - Last synced at: 1 day ago - Pushed at: over 1 year ago - Stars: 306 - Forks: 57

shivammathur/setup-php

GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and various tools.

Language: TypeScript - Size: 25.4 MB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 3,050 - Forks: 379

anchore/grant

Search an SBOM for licenses and the packages they belong to

Language: Go - Size: 802 KB - Last synced at: 2 days ago - Pushed at: 3 days ago - Stars: 90 - Forks: 7

tiobe/JuliaCheck

Code checker for Julia language

Language: Julia - Size: 161 KB - Last synced at: 3 days ago - Pushed at: 3 days ago - Stars: 0 - Forks: 0

PyCQA/vscode-bandit

A Visual Studio Code extension with support for the Bandit static analysis tool.

Language: Python - Size: 1.65 MB - Last synced at: about 11 hours ago - Pushed at: 3 days ago - Stars: 4 - Forks: 1

facebook/infer

A static analyzer for Java, C, C++, and Objective-C

Language: OCaml - Size: 191 MB - Last synced at: 2 days ago - Pushed at: 3 days ago - Stars: 15,228 - Forks: 2,031

vojtech-dobes/phpstan-php-graphql-server-nette-integration

Language: PHP - Size: 20.5 KB - Last synced at: 3 days ago - Pushed at: 3 days ago - Stars: 0 - Forks: 0

tokiwa-software/fuzion

The Fuzion Language Implementation

Language: Java - Size: 21.6 MB - Last synced at: 3 days ago - Pushed at: 3 days ago - Stars: 54 - Forks: 12

vojtech-dobes/phpstan-php-graphql-server

Language: PHP - Size: 25.4 KB - Last synced at: 3 days ago - Pushed at: 3 days ago - Stars: 0 - Forks: 0

UMR-CNRM/pyfortool

Python FORTRAN tool

Language: Python - Size: 64.7 MB - Last synced at: 3 days ago - Pushed at: 3 days ago - Stars: 2 - Forks: 3

vercel/nft

Node.js dependency tracing utility

Language: JavaScript - Size: 4.04 MB - Last synced at: 3 days ago - Pushed at: 3 days ago - Stars: 1,447 - Forks: 155

CarrotManMatt/ccft-pymarkdown

A Python wrapper around jackdewinter's PyMarkdown linter to suppress errors, caused by custom-formatted tables in Markdown files

Language: Python - Size: 314 KB - Last synced at: 3 days ago - Pushed at: 3 days ago - Stars: 1 - Forks: 0

iarsystems/arm

IAR Build Tools for Arm

Size: 21.5 KB - Last synced at: 3 days ago - Pushed at: 3 days ago - Stars: 4 - Forks: 0