Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/flatt-security/shisho
Lightweight static analyzer for several programming languages
https://github.com/flatt-security/shisho
code-analysis devsecops go rust security static-analysis terraform terraform-security
Last synced: about 1 month ago
JSON representation
Lightweight static analyzer for several programming languages
- Host: GitHub
- URL: https://github.com/flatt-security/shisho
- Owner: flatt-security
- License: agpl-3.0
- Created: 2021-07-28T10:46:11.000Z (over 3 years ago)
- Default Branch: main
- Last Pushed: 2023-08-07T06:55:18.000Z (over 1 year ago)
- Last Synced: 2024-08-02T00:26:35.324Z (4 months ago)
- Topics: code-analysis, devsecops, go, rust, security, static-analysis, terraform, terraform-security
- Language: Rust
- Homepage: https://docs.shisho.dev
- Size: 7.85 MB
- Stars: 372
- Watchers: 3
- Forks: 15
- Open Issues: 38
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
- awesome-repositories - flatt-security/shisho - Lightweight static analyzer for several programming languages (Rust)
- awesome-tf - Shisho - Lightweight static analyzer for Terraform. (Tools / Community providers)
README
# shisho
[![GitHub Release][release-img]][release]
[![GitHub Marketplace][marketplace-img]][marketplace]
[![License][license-img]][license]
[![Documentation][documentation-img]][documentation]
[![Test][test-img]][test]
[![Playground][playground-img]][playground]
Shisho is a lightweight static analyzer for developers.
### Please see [the usage documentation](https://docs.shisho.dev) for further information.
## Try at Playground
You can try Shisho at [our playground](https://play.shisho.dev).
## Try with Docker
You can try shisho in your machine as follows:
```sh
echo "func test(v []string) int { return len(v) + 1; }" | docker run -i ghcr.io/flatt-security/shisho-cli:latest find "len(:[...])" --lang=go
```
```sh
echo "func test(v []string) int { return len(v) + 1; }" > file.go
docker run -i -v $(pwd):/workspace ghcr.io/flatt-security/shisho-cli:latest find "len(:[...])" --lang=go /workspace/file.go
```
## Install with pre-built binaries
When you'd like to run shisho outside docker containers, please follow the instructions below:
### Linux / macOS
Run the following command(s):
```sh
# Linux
wget https://github.com/flatt-security/shisho/releases/latest/download/build-x86_64-unknown-linux-gnu.zip -O shisho.zip
unzip shisho.zip
chmod +x ./shisho
mv ./shisho /usr/local/bin/shisho
# macOS
wget https://github.com/flatt-security/shisho/releases/latest/download/build-x86_64-apple-darwin.zip -O shisho.zip
unzip shisho.zip
chmod +x ./shisho
mv ./shisho /usr/local/bin/shisho
```
Then you'll see a shisho's executable in `/usr/local/bin`.
### Windows
Download the prebuild binary from [releases](https://github.com/flatt-security/shisho/releases) and put it into your `%PATH%` directory.
If you're using [Windows Subsystem for Linux](https://docs.microsoft.com/en-us/windows/wsl/install-win10), you can install shisho with the above instructions.
# More
- We're also building [Shisho as a Service](https://shisho.dev) to make Security-as-Code more accessible.
- If you need direct support, you can contact us at `[email protected]`.
[release]: https://github.com/flatt-security/shisho/releases/latest
[release-img]: https://img.shields.io/github/release/flatt-security/shisho.svg?logo=github
[marketplace]: https://github.com/marketplace/actions/shisho-action
[marketplace-img]: https://img.shields.io/badge/marketplace-shisho--action-blue?logo=github
[license]: https://github.com/flatt-security/shisho/blob/main/LICENSE
[license-img]: https://img.shields.io/github/license/flatt-security/shisho
[documentation]: https://docs.shisho.dev
[documentation-img]: https://img.shields.io/badge/docs-docs.shisho.dev-purple
[playground]: https://play.shisho.dev
[playground-img]: https://img.shields.io/badge/playground-playground.shisho.dev-purple
[test]: https://github.com/flatt-security/shisho/actions/workflows/test.yml
[test-img]: https://github.com/flatt-security/shisho/actions/workflows/test.yml/badge.svg?branch=main