1863 Open source projects that are alternatives of or similar to Njsscan

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Lint committed files on pre-push 🔬

An example linter written with go/analysis for tutorial purposes

Very WIP static analysis for Lua

Command line tool to validate configuration files

A library and command line interface for formatting and linting Dockerfiles.

💅 Stylize your code! Automatic clang-format and cmake-format targets for CMake.

Library to allow creation, running, and reporting of custom lint rules for JSON files

Bad Code Shall Not Pass

An ESLint shareable config that I used in my projects

Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer

IAST 灰盒扫描工具

Static Analysis Compiler Plugin for Scala

OpenAPI 2.0/3.0.x intellisense, validator, linter, converter and resolver extension for Visual Studio Code

Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 200 controls covering CIS, ISO27001, GDPR, HIPAA, SOC2, ENS and other security frameworks.

It's not just a linter that annoys you!

Bandit is a tool designed to find common security issues in Python code.

An extensible multilanguage static code analyzer.

Awesome .NET Security Resources

Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start

Code style checking for RSpec files

A static analysis security vulnerability scanner for Ruby on Rails applications

Static code analyzer for TypeScript

Linting tool for CloudFormation templates

Staticcheck - The advanced Go linter

Linter for Awesome lists

A static code analysis tool for the Elixir language with a focus on code consistency and teaching.

Linter for Dart.

Go fearless SQL. Sqlvet performs static analysis on raw SQL queries in your Go code base.

Linting for your git commit messages

GitHub Action for running ansible-lint as part of your workflows! [ https://github.com/marketplace/actions/ansible-lint ]

SonarJS rules for ESLint

A community-driven list of awesome linters.

REDbot is lint for HTTP.

Security scanner coordinator

a javascript static security analysis tool

ShellCheck, a static analysis tool for shell scripts

Dockerfile linter, validate inline bash, written in Haskell

An anti-bikeshedding Kotlin linter with built-in formatter

SonarSource Static Analyzer for JavaScript and TypeScript

Awesome PHP Security Resources 🕶🐘🔐

🚦 An extensible linter for the TypeScript language

🐛 A tool that can speed up linting of php files by running several lint processes at once.

☕️ SonarSource Static Analyzer for Java Code Quality and Security

Awesome Python Security resources 🕶🐍🔐

A curated list of awesome Go linters. More than 60 linters and tools!

Golang security checker

Reapsaw is a continuous security devsecops tool, which helps in enabling security into CI/CD Pipeline. It supports coverage for multiple programming languages.

cfmt is a tool to wrap Go comments over a certain length to a new line.

A linter for Clojure code that sparks joy.

⚙️ A curated list of static analysis (SAST) tools for all programming languages, config files, build tools, and more.

Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues

The official GitHub mirror of https://gitlab.com/pycqa/flake8

A tool to verify that your files are in harmony with your .editorconfig

An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

Cross-platform static analyzer and linter for Swift.

🐳 📡 Docker way of running SonarQube + any DB

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy

A mighty, modern linter that helps you avoid errors and enforce conventions in your styles.