Top 403 static-analysis open source projects

Library and CLI tool for analysing CloudFormation templates and check them for security compliance.

Analyzer of PHP code to search issues with deprecated functionality in newer interpreter versions.

Kubernetes RBAC static Analysis & visualisation tool

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

Static code analysis for Kotlin

mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.

Code Climate engine for code duplication analysis

Configuration files that allow cppcheck to provide better static analysis results

A linter, formatter for finding and removing unused import statements.

🐺 Malware analysis platform

Flycheck integration for Elsa---Emacs lisp static analyzer

No description or website provided.

Program analysis playground for a simple, imperative language

A Simple PE File Heuristics Scanners

This Github Action runs Bridgecrew against an Infrastructure-as-Code repository. Bridgecrew performs static security analysis of Terraform & CloudFormation Infrastructure code.

sleigh craft!

Generic implementation of different CFA families based on monadic decomposition

Analysis of file (doc, pdf, exe, ...) in deep (emmbedded file(s)) with clamscan and yara rules

⚙️ Scan your Java, Kotlin, PHP, Python, JavaScript, TypeScript projects at GitHub with Qodana

Android malware detection using static and dynamic analysis

Applies waves of mutations provided by other tools, such as linters or codemods.

GitHub Action to set up Fortify ScanCentral Client

Static analysis framework for .NET programs.

✨🚀 Blazing fast, inferred static type checker for JavaScript.

An example linter written with go/analysis for tutorial purposes

Very WIP static analysis for Lua

RAIR: RAdare In Rust

An ethereum evm bytecode disassembler and static/dynamic analysis tool

A simple terminal UI for Go linters

Static checker for Java

A pair programming partner for writing better PHP. Pahout means PHP mahout 🐘

A plugin to simplify Static Code Analysis on Gradle. Not restricted to, but specially useful, in Android projects, by making sure all analysis can access the SDK classes.

Java bytecode generator for sound and precise partial program analysis

A Python Bytecode Disassembler helping reverse engineers in dissecting Python binaries by disassembling and analyzing the compiled python byte-code(.pyc) files across all python versions (including Python 3.10.*)

Code Climate Engine for ESLint

SonarQube Cucumber Gherkin Analyzer

A personal app to store people that owe you money or you owe money to. "Mo Money Mo Problems" 🎵 - The Notorious B.I.G. 😎

A 6502-oriented low-level programming language supporting advanced static analysis

OPEM (Open Source PEM Fuel Cell Simulation Tool)

Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages

An Error Prone plugin for SLF4J

Making CoreOS' Clair easily work in CI/CD pipelines

A tool for linting and static analysis of Lua code.

High-level library for executable binary file analysis

*DEPRECATED* Symfony extension for PHPStan

JAW: A Graph-based Security Analysis Framework for JavaScript and Client-side CSRF

an obfuscation-resilient, highly precise and reliable library detector for Android applications

Docker image for Alpine Linux with latest ShellCheck, a static analysis tool for shell scripts.

SQL Server static code analysis rules for SSDT database projects

Static Analyzer for LLVM bitcode based on Abstract Interpretation

Code Climate Engine for PHP Code Sniffer

coala base docker image

OpenStaticAnalyzer is a source code analyzer tool, which can perform deep static analysis of the source code of complex systems.

📐 Tools for surveying Dart packages

Vim plugin for executing Python's optional static type checker MyPy (http://mypy-lang.org/)

Staticcheck's official GitHub Action

Integrate SonarQube scanner to GitHub Actions

Snap Programming Language

An IDA_Wrapper for linux, shipped with an Function Identifier. It works well with Driller on static linked binaries.