Top 403 static-analysis open source projects

Automated code reviews via mutation testing - semantic code coverage.

Semgrep rules registry

C code refactoring browser

A curated list of mathematics documents ,Concepts, Study Materials , Algorithms and Codes available across the internet for machine learning and deep learning

Manage translation and localization with static analysis, for Ruby i18n

Validate and visualize dependencies. Your rules. JavaScript, TypeScript, CoffeeScript. ES6, CommonJS, AMD.

Analyses and reports testability issues of a php codebase

Converts JavaScript to TypeScript and TypeScript to better TypeScript.

An Android base app with loads of cool libraries/configuration NOT MAINTAINED

nodejsscan is a static security code scanner for Node.js applications.

Toolkit for enriching and speeding up static malware analysis

Checks syntax of reStructuredText and code blocks nested within it

Release snapshots of the Frama-C platform for source code analysis

Dynamic definitions and types provider for ruby static analysis

njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

Setup scripts for my Malware Analysis VMs

A parser and source code analyzer for PL/SQL and Oracle SQL.

A list of computer-science readings I recommend

Argus static analysis framework

Command line tool to validate configuration files

A tool to automatically fix PHP Coding Standards issues

GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and various tools.

The Java Disassembler

Standalone linter for ABAP

Haxe Checkstyle

IDAPython plugin for finding function strings recursively

🔍 Offline Analyzer for extracting features, artifacts and IoCs from Windows, Linux, Android, iPhone, Blackberry, macOS binaries, emails and more

PHP Static Analysis Tool - discover bugs in your code without running it!

GopherCI was a project to help you maintain high-quality Go projects, by checking each GitHub Pull Request, for backward incompatible changes, and a suite of other third party static analysis tools.

Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure DevOps, Google CloudBuild, VS Code and Visual Studio. No server required!

Binary Analysis Platform

CoRnucopia of ABstractions: a library for building abstract interpretation-based analyses

A libre cross-platform disassembler.

Static analyzer for C/C++ based on the theory of Abstract Interpretation.

Awesome Golang Security resources 🕶🔐

Telling tales on you for leaking secrets!

Extension for PHPStan to allow analysis of Drupal code.

A linter, formatter for finding and removing unused import statements.

Pacman-inspired game, for teaching testing purposes.

Android Mobile Device Hardening

Babel plugin that statically extracts i18next and react-i18next translation keys.

Securify v2.0

Fast Static File Analysis Framework

A new context, field, and array-sensitive heap analysis for LLVM bitcode based on DSA.

🐞 Primitive Erlang Security Tool

Language server for PHP, with powerful static analysis and type inference.

A Static Code Analyzer for PHP (a PhpStorm/Idea Plugin)

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy

A set of custom fixers for PHP CS Fixer

PHP_CodeSniffer is a set of two PHP scripts; the main phpcs script that tokenizes PHP, JavaScript and CSS files to detect violations of a defined coding standard, and a second phpcbf script to automatically correct coding standard violations. PHP_CodeSniffer is an essential development tool that ensures your code remains clean and consistent.

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

Various code metrics for Python code

A service that analyzes docker images and applies user-defined acceptance policies to allow automated container image validation and certification

KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best practices.

sonar-swift.SonarQube iOS Plugin, Support Objective-C And Swift, Support Infer (SonarQube iOS 代码扫描插件，支持 Objective-C 和 Swift ，支持 Infer 结果导入 ) base on https://github.com/Idean/sonar-swift

⚙️ A curated list of static analysis (SAST) tools for all programming languages, config files, build tools, and more.

Run a security scan on your terraform with the very nice https://github.com/liamg/tfsec

The official GitHub mirror of https://gitlab.com/pycqa/flake8

Security-focused static analysis for the Phoenix Framework