489 Open source projects that are alternatives of or similar to Semgrep

It's not just a linter that annoys you!

Code Climate Engine for ESLint

Code analyzer for C# and VB.NET projects https://redirect.sonarsource.com/plugins/vbnet.html

🐘 SonarPHP: PHP static analyzer for SonarQube & SonarLint

T.J. Watson Libraries for Analysis

A static analyzer for Java, C, C++, and Objective-C

SonarLint integration for Apache Netbeans

Go Taint CHeck Analyser

Extra strict and opinionated rules for PHPStan

Kubernetes RBAC static Analysis & visualisation tool

A pair programming partner for writing better PHP. Pahout means PHP mahout 🐘

Java bytecode generator for sound and precise partial program analysis

Pssst!... see what Rust is doing behind the curtains 🕵🤫

mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.

A Python Bytecode Disassembler helping reverse engineers in dissecting Python binaries by disassembling and analyzing the compiled python byte-code(.pyc) files across all python versions (including Python 3.10.*)

Sonar plugin to analyze ESQL-sourcecode of IBM Integration Bus projects

Static call graph generator. The official Python 3 version. Development repo.

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

A tool for collecting historical metrics about a project's dependencies

SonarQube Cucumber Gherkin Analyzer

A personal app to store people that owe you money or you owe money to. "Mo Money Mo Problems" 🎵 - The Notorious B.I.G. 😎

Configuration files that allow cppcheck to provide better static analysis results

A 6502-oriented low-level programming language supporting advanced static analysis

Bringing clang-tidy magic to Visual Studio C++ developers.

OPEM (Open Source PEM Fuel Cell Simulation Tool)

Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages

An Error Prone plugin for SLF4J

🐺 Malware analysis platform

Making CoreOS' Clair easily work in CI/CD pipelines

A tool for linting and static analysis of Lua code.

🐺 Malware analysis platform

Flycheck integration for Elsa---Emacs lisp static analyzer

High-level library for executable binary file analysis

*DEPRECATED* Symfony extension for PHPStan

No description or website provided.

JAW: A Graph-based Security Analysis Framework for JavaScript and Client-side CSRF

an obfuscation-resilient, highly precise and reliable library detector for Android applications

The implementation of the Rascal meta-programming language (including interpreter, type checker, parser generator, compiler and JVM based run-time system)

This repo demonstrates how to work on CI/CD for Mobile Apps 📱 using Github Actions 💊 + Firebase Distribution 🎉

Docker image for Alpine Linux with latest ShellCheck, a static analysis tool for shell scripts.

SQL Server static code analysis rules for SSDT database projects

Program analysis playground for a simple, imperative language

Detection of design principle violations in Kotlin as a plugin to detekt.

Joint Advanced Defect assEsment for android applications

A Simple PE File Heuristics Scanners

Static Analyzer for LLVM bitcode based on Abstract Interpretation

This Github Action runs Bridgecrew against an Infrastructure-as-Code repository. Bridgecrew performs static security analysis of Terraform & CloudFormation Infrastructure code.

coala base docker image

📐 Tools for surveying Dart packages

Clean C++ project for you to use. Features: Modern CMake, CPack, Doxygen, PlantUML, Catch Unit testing, static analysis

List of packages that use `standard`

Vim plugin for executing Python's optional static type checker MyPy (http://mypy-lang.org/)

Staticcheck's official GitHub Action

sleigh craft!

Django application that performs SAST and Malware Analysis for Android APKs

ClangKit provides an Objective-C frontend to LibClang. Source tokenization, diagnostics and fix-its are actually implemented.

Awesome .NET Security Resources

基于lean和immortalwrt编译第三方固件，每天自动更新插件和内核，Fusion编译法

Static Analysis Compiler Plugin for Scala

OpenWrt for Nanopi R2C/R2S/R4S/X86