521 Open source projects that are alternatives of or similar to Semgrep Rules

Next-gen phpDoc parser with support for intersection types and generics

OpenStaticAnalyzer is a source code analyzer tool, which can perform deep static analysis of the source code of complex systems.

批量漏洞扫描框架

📐 Tools for surveying Dart packages

GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and various tools.

A new context, field, and array-sensitive heap analysis for LLVM bitcode based on DSA.

Open-Source Security Architecture | 开源安全架构

A Golang tool that does static analysis, unit testing, code review and generate code quality report.

Staticcheck's official GitHub Action

The OWASP ZAP core project

Integrate SonarQube scanner to GitHub Actions

ShellCheck, a static analysis tool for shell scripts

Validate and visualize dependencies. Your rules. JavaScript, TypeScript, CoffeeScript. ES6, CommonJS, AMD.

An IDA_Wrapper for linux, shipped with an Function Identifier. It works well with Driller on static linked binaries.

library for importing functions from dlls in a hidden, reverse engineer unfriendly way

GitHub Action for the codacy-analysis-cli

Kubernetes object analysis with recommendations for improved reliability and security

A library to read static analysis reports into a Java object model

Awesome autocompletion, static analysis and refactoring library for python

Visual Studio Code extension integrating Tenkawa PHP language server.

golang version for nmap service and application version detection (without nmap installation)

Powerful Shodan API client using RxJava and Retrofit

Collection of small security tools, mostly in Bash and Python. CTFs, Bug Bounty and other stuff.

Network Security Vulnerability Scanner

The official GitHub mirror of https://gitlab.com/pycqa/flake8

Java bytecode analyzer customizable via JSON rules

Haxe Checkstyle extension for Visual Studio Code

Malware Behavior Analyzer

Source code for the ICLR 2021 work "Generating Adversarial Computer Programs using Optimized Obfuscations"

OWASP ZAP Add-ons

WooCommerce function and class declaration stubs for static analysis.

Interactive code auditing and grep tool in Emacs Lisp

Configurable XML Doc warnings for ReSharper

IDAPython Made Easy

Improve your code security by running different security checks/validation in a simple way.

GopherCI was a project to help you maintain high-quality Go projects, by checking each GitHub Pull Request, for backward incompatible changes, and a suite of other third party static analysis tools.

Work-in-progress tool to reverse unity's IL2CPP toolchain.

FlowDroid Static Data Flow Tracker

Interchange format for results for static analysis tools

A linter for Clojure code that sparks joy.

SonarJS rules for ESLint

Tool for scan vulnerabilities in Moodle platforms

THIS REPOSITORY HAS BEEN MOVED TO https://github.com/wpscanteam/wpscan USE THAT!!!

A Github Action for ShellCheck

Library and CLI tool for analysing CloudFormation templates and check them for security compliance.

Go Taint CHeck Analyser

PySonar2: an advanced semantic indexer for Python

Universal test framework for cli tools [mainly for code analyzers and compilers]

Golang security checker

PhpCodeAnalyzer scans codebase and analyzes which non-built-in php extensions used

Enumeration sub domains(枚举子域名)

Analyzer of PHP code to search issues with deprecated functionality in newer interpreter versions.

Passively scan for Bluetooth Low Energy devices and attempt to fingerprint them

🆕 The Multi-Tool Web Vulnerability Scanner.

Linux vulnerability scanner based on Salt Open and Vulners audit API, with Slack notifications and JIRA integration

mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.

Static code analyzer for TypeScript

COM S 413/513 and CPR E 513 Foundations and Applications of Program Analysis @ Iowa State University

Code Climate engine for code duplication analysis

NodeJS Simple Network Scanner