static-analysis

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

mobile-security

web-security

devsecops

windows-mobile-security

ios-security

runtime-security

cwe

facebook/infer
503日前14.6k

A static analyzer for Java, C, C++, and Objective-C

analysis-tools-dev/static-analysis
503日前12.6k

⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.

hadolint/hadolint
503日前9.5k

Dockerfile linter, validate inline bash, written in Haskell

SonarSource/sonarqube
503日前8.4k

Continuous Inspection

code-quality

static-analysis

sonarqube

checkstyle/checkstyle
503日前8.1k

Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.

reviewdog/reviewdog
503日前7.1k

🐶 Automated code review tool integrated with any code analysis tools regardless of programming language

presidentbeef/brakeman
502日前6.9k

A static analysis security vulnerability scanner for Ruby on Rails applications

security-vulnerability

facebook/pyre-check
503日前6.6k

Performant type-checking for python.

abstract-interpretation

program-analysis

taint-analysis

control-flow-analysis

aquasecurity/tfsec
502日前6.5k

Security scanner for your Terraform code

vulnerability-scanners

infrastructure-as-code

linter

google-cloud-platform

bridgecrewio/checkov
502日前6.4k

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

infrastructure-as-code

horsicq/Detect-It-Easy
501日前6.3k

Program for determining types of files for Windows, Linux and MacOS.

detekt/detekt
503日前5.9k

Static code analysis for Kotlin

ast-grep/ast-grep
503日前5.2k

⚡A CLI tool for code structural search, lint and rewriting. Written in Rust

pylint-dev/pylint
504日前5.0k

It's not just a linter that annoys you!

rrrene/credo
503日前4.8k

A static code analysis tool for the Elixir language with a focus on code consistency and teaching.

pmd/pmd
504日前4.6k

An extensible multilanguage static code analyzer.

vuejs/eslint-plugin-vue
507日前4.3k

Official ESLint plugin for Vue.js

troessner/reek
505日前4.0k

Code smell detector for Ruby

PyCQA/flake8
502日前3.2k

flake8 is a python tool that glues together pycodestyle, pyflakes, mccabe, and third-party plugins to check the style and quality of some python code.