Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
Static code analysis
Static program analysis (or static analysis) is the analysis of computer programs performed without executing them, in contrast with dynamic program analysis, which is performed on programs during their execution.
- GitHub: https://github.com/topics/static-code-analysis
- Related Topics: dynamic-code-analysis, testing,
- Aliases: static-program-analysis,
- Last updated: 2025-02-01 00:28:58 UTC
- JSON Representation
https://github.com/usagitoneko97/klara
Automatic test case generation for python and static analysis library
ast cfg python ssa static-analysis static-code-analysis
Last synced: 31 Oct 2024
https://github.com/codeintegrity-ai/mutahunter
Open Source, Language Agnostic Automatic Test Generation + LLM Mutation Testing
artificial-intelligence automated-testing llm-agent mutation-testing software-testing static-code-analysis test-automation unit-testing
Last synced: 05 Nov 2024
https://github.com/webarx-security/wpbullet
A static code analysis for WordPress (and PHP)
cyber-security security static-code-analysis wordpress wordpress-development
Last synced: 23 Jan 2025
https://github.com/abaplint/abaplint
Standalone static analysis for ABAP
abap abaplint code-quality-analyzer hacktoberfest linter static-analysis static-code-analysis
Last synced: 07 Feb 2025
https://github.com/dmitrytsepelev/rubocop-graphql
Rubocop extension for enforcing graphql-ruby best practices
best-practices graphql linter rubocop rubocop-graphql ruby static-code-analysis
Last synced: 06 Feb 2025
https://github.com/DmitryTsepelev/rubocop-graphql
Rubocop extension for enforcing graphql-ruby best practices
best-practices graphql linter rubocop rubocop-graphql ruby static-code-analysis
Last synced: 24 Nov 2024
https://github.com/felipebz/zpa
Parser and static code analysis tool for PL/SQL and Oracle SQL.
analysis code-analysis code-quality grammar oracle-forms oracle-sql parser plsql plsql-analyzer plsql-parser sonarqube sql-analyzer static-analysis static-code-analysis
Last synced: 26 Oct 2024
https://github.com/touk/sputnik
Static code review for your Gerrit patchsets. Runs Checkstyle, PMD, FindBugs, Scalastyle, CodeNarc, JSLint for you!
automated-tests codenarc findbugs gerrit java jslint pmd review sputnik static-code-analysis
Last synced: 03 Feb 2025
https://github.com/realvizu/NsDepCop
NsDepCop is a static code analysis tool that helps to enforce namespace dependency rules in C# projects. No more unplanned or unnoticed dependencies in your system.
csharp dependencies dependency-analysis dotnet msbuild namespace nuget static-code-analysis visual-studio-extension
Last synced: 26 Oct 2024
https://github.com/maibornwolff/codecharta
CodeCharta visualizes multiple code metrics using 3D tree maps.
3d-tree-maps analyzer angular angularjs data-visualization jest metrics node nodejs parser redux sonar sonarqube static-code-analysis temporal-coupling ts typescript visualization
Last synced: 04 Feb 2025
https://github.com/Perl-Critic/Perl-Critic
The leading static analyzer for Perl. Configurable, extensible, powerful.
perl perl-best-practices static-analysis static-code-analysis
Last synced: 10 Nov 2024
https://github.com/chebuya/sastsweep
Automatically detect potential vulnerabilities and analyze repository metrics to prioritize open source security research targets
cli owasp sast security-audit security-research security-scanner semgrep static-code-analysis vulnerability-research vulnerability-scanners
Last synced: 22 Nov 2024
https://github.com/exussum12/coveragechecker
Allows old code to use new standards
codeclimate coverage diff filter hacktoberfest jacoco phan php phpcs phpmd phpstan phpunit pylint qa quality quality-control standalone-php-library standard-conform standards static-code-analysis
Last synced: 07 Feb 2025
https://github.com/jetbrains/qodana-cli
π§ JetBrains Qodanaβs official command line tool
ci cli code-quality code-review code-scanning devsecops java javascript kotlin php python qodana sarif sarif-report static-code-analysis typescript
Last synced: 07 Feb 2025
https://github.com/cflint/CFLint
Static code analysis for CFML (a linter)
cfml code-quality coldfusion findbugs lint linter lucee static-analysis static-code-analysis
Last synced: 30 Oct 2024
https://github.com/phpstan/phpstan-webmozart-assert
PHPStan extension for webmozart/assert
assert php php7 phpstan static-analysis static-code-analysis
Last synced: 07 Feb 2025
https://github.com/mebigfatguy/fb-contrib
a FindBugs/SpotBugs plugin for doing static code analysis for java code bases
findbugs findbugs-plugin java static-code-analysis
Last synced: 02 Feb 2025
https://github.com/suned/pfun
Functional, composable, asynchronous, type-safe Python.
async asyncio curry currying effect-system effects functional-programming immutable immutable-collections immutable-datastructures immutable-objects mypy python-3 python3 static-code-analysis type-safety types zio
Last synced: 20 Dec 2024
https://github.com/tomasbjerre/violations-lib
Java library for parsing report files from static code analysis.
android-lint checkstyle clang codenarc cppcheck cpplint css-linter detekt eslint findbugs golint jshint ktlint phpcs resharper rubycop spotbugs static-code-analysis stylecop swiftlint
Last synced: 03 Feb 2025
https://github.com/usyd-blockchain/vandal
Static program analysis framework for Ethereum smart contract bytecode.
blockchain decompiler ethereum ethereum-contracts evm smart-contracts static-code-analysis static-pro
Last synced: 06 Feb 2025
https://github.com/thesp0nge/owasp-orizon
Owasp Orizon is a source code static analyzer tool designed to spot security issues in Java applications.
code-review j2ee java owasp static-code-analysis vulnerability-scanners
Last synced: 29 Jan 2025
https://github.com/chrisallenlane/drek
A static-code-analysis tool for performing security-focused code reviews. It enables an auditor to swiftly map the attack-surface of a large application, with an emphasis on identifying development anti-patterns and footguns.
information-security security-audit static-code-analysis
Last synced: 24 Jan 2025
https://github.com/zaid-ajaj/npgsql.fsharp.analyzer
F# analyzer that provides embedded SQL syntax analysis, type-checking for parameters and result sets and nullable column detection when writing queries using Npgsql.FSharp.
analyzer fsharp ionide npgsql postgres static-code-analysis
Last synced: 27 Oct 2024
https://github.com/alexkohler/nakedret
nakedret is a Go static analysis tool to find naked returns in functions greater than a specified function length.
go golang static-analysis static-analyzer static-code-analysis
Last synced: 17 Nov 2024
https://github.com/foospidy/grepbugs
A regex based source code scanner.
cloc grep python regex scanner static-analyzer static-code-analysis
Last synced: 07 Nov 2024
https://github.com/pytorch-labs/torchfix
TorchFix - a linter for PyTorch-using code with autofix support
flake8 flake8-plugin hacktoberfest linter python pytorch static-analysis static-code-analysis
Last synced: 05 Feb 2025
https://github.com/feramhq/FastLint-Issues
FastLint automatically finds bugs in your code with cutting-edge AI-powered code analysis
ai chatgpt code-analysis code-review fastlint gpt-4 static-code-analysis
Last synced: 29 Nov 2024
https://github.com/jeromedalbert/rubocop-obsession
RuboCop extension focused on higher-level concepts, like checking that code reads from top to bottom
code-formatter linter rubocop ruby static-code-analysis
Last synced: 31 Jan 2025
https://github.com/wttech/aem-rules-for-sonarqube
SonarQube plugin with set of rules detecting possible bugs and bad smells specific for AEM development.
aem java quality slice sling sling-models sonar sonarqube static-code-analysis
Last synced: 04 Feb 2025
https://github.com/codeclimate/codeclimate-duplication
Code Climate engine for code duplication analysis
code-quality codeclimate codeclimate-engine duplication javascript php python quality ruby static-analysis static-code-analysis
Last synced: 06 Jan 2025
https://github.com/tylerwince/flake8-bandit
Automated security testing using bandit and flake8.
bandit flake8 security security-automation security-tools static-code-analysis vulnerability-detection
Last synced: 15 Nov 2024
https://github.com/standard/eslint-config-standard-jsx
ESLint Shareable Config for JSX support in JavaScript Standard Style
development ecmascript es6 eslint javascript linter nodejs standard static-code-analysis style-guide
Last synced: 05 Feb 2025
https://github.com/okeuday/pest
:beetle: Primitive Erlang Security Tool
elixir elixir-security erlang erlang-security security security-audit security-scanner static-analysis static-code-analysis vulnerability-detection
Last synced: 05 Feb 2025
https://github.com/phpstan/phpstan-nette
Nette Framework class reflection extension for PHPStan & framework-specific rules
nette-framework php php7 phpstan static-analysis static-analyzer static-code-analysis testing
Last synced: 31 Jan 2025
https://github.com/codeclimate/codeclimate-eslint
Code Climate Engine for ESLint
code-quality codeclimate codeclimate-engine es6 eslint javascript linter linting quality static-analysis static-code-analysis
Last synced: 07 Feb 2025
https://github.com/priv-kweihmann/meta-sca
Layer for static code analysis and security hardening
bitbake c cxx defense-in-depth embedded-linux go jenkins linter linux perl poky python security-hardening shellscript static-code-analysis yocto
Last synced: 03 Feb 2025
https://github.com/linthtml/linthtml
The html5 linter and validator.
cli hint html lint linter linting static-code-analysis
Last synced: 17 Nov 2024
https://github.com/kidkarolis/healthier
π§ββοΈ Healthier is an opinionated style agnostic code linter β a friendly companion to Prettier
development ecmascript eslint javascript linter nodejs prettier standard static-code-analysis
Last synced: 19 Dec 2024
https://github.com/KidkArolis/healthier
π§ββοΈ Healthier is an opinionated style agnostic code linter β a friendly companion to Prettier
development ecmascript eslint javascript linter nodejs prettier standard static-code-analysis
Last synced: 18 Nov 2024
https://github.com/hylang/hydiomatic
The Hy Transformer
hy logic-programming minikanren python static-code-analysis symbolic-computation
Last synced: 16 Nov 2024
https://github.com/mkohm/detekt-hint
Detection of design principle violations in Kotlin as a plugin to detekt.
anti-patterns code-quality code-smells danger design-principles detections detekt detekt-hint detekt-plugin kotlin programming-principles software-architecture static-code-analysis
Last synced: 27 Oct 2024
https://github.com/phpstan/phpstan-mockery
PHPStan extension for Mockery
mockery php php7 phpstan static-analysis static-code-analysis
Last synced: 01 Feb 2025
https://github.com/konrad1977/loco
A linter for Swift Localizations
cli linter localization-management static-code-analysis swift xcode
Last synced: 29 Nov 2024
https://github.com/alexkohler/unimport
unimport is a Go static analysis tool to find unnecessary import aliases.
go golang static-analysis static-analyzer static-code-analysis
Last synced: 14 Nov 2024
https://github.com/codeclimate/codeclimate-rubocop
Code Climate Engine for Rubocop
code-quality codeclimate codeclimate-engine complexity linter linting metrics performance quality rails rubocop ruby security static-analysis static-code-analysis
Last synced: 31 Dec 2024
https://github.com/MGamalE/Android-CICD
This repo demonstrates how to work on CI/CD for Mobile Apps :iphone: using Github Actions :pill: + Firebase Distribution :tada:
actions actionshackathon21 android android-ci ci ci-cd cicd continuous-delivery continuous-deployment continuous-integration firebase firebase-distribution github-actions kotlin-android linter linting sonarcloud sonarqube static-code-analysis
Last synced: 23 Oct 2024
https://github.com/yamadashy/phpstan-friendly-formatter
π€ A friendly error formatter extension for PHPStan that provides more readable and informative output, including code snippets and color highlighting.
code-quality developer-tools php php8 phpstan phpstan-extension static-analysis static-code-analysis testing
Last synced: 04 Feb 2025
https://github.com/microsoft/cmd-call-graph
A simple tool to generate a call graph for calls within Windows CMD (batch) files.
batch-file batch-script call-graph call-graph-analysis python static-code-analysis
Last synced: 20 Dec 2024
https://github.com/rubocop/vscode-rubocop
The official VS Code extension for the RuboCop linter and code formatter.
code-formatter linter rubocop ruby static-code-analysis vscode-extension
Last synced: 06 Nov 2024
https://github.com/cathive/concourse-sonarqube-resource
performs SonarQube analyses and checks quality gates https://concourse-ci.org/ https://sonarqube.org/
code-quality concourse-ci concourse-ci-resource concourse-resource continuous-integration pipeline quality-gate quality-gates sonar-scanner sonarcloud sonarqube sonarqube-analysis sonarqube-scanner static-code-analysis
Last synced: 06 Feb 2025
https://github.com/qasimwani/gct
Graphical Code Tracer (GCT): Visualize code at lightning speed
ast graphviz python static-code-analysis visualization
Last synced: 07 Nov 2024
https://github.com/rsoesemann/codeclimate-apexmetrics
ApexMetrics - Code Climate engine for Salesforce [DISCONTINUED use CC PMD instead)
apex clean-code codeclimate linter pmd salesforce static-code-analysis
Last synced: 28 Oct 2024
https://github.com/rsoesemann/unhappy-soup
Problematic Salesforce code to showcase how PMD can find it
apex continuous-integration pmd salesforce static-code-analysis
Last synced: 25 Jan 2025
https://github.com/htrgouvea/zarn
A lightweight static security analysis tool for modern Perl Apps
sast security static-analysis static-code-analysis
Last synced: 14 Nov 2024
https://github.com/skryukov/rubocop-gradual
Gradually improve your code with RuboCop
code-formatter hacktoberfest linter rubocop ruby static-code-analysis
Last synced: 21 Jan 2025
https://github.com/codeface-io/codeface
Mac App for Architecture Analytics
clean-architecture clean-code macos software-architecture static-code-analysis swift swiftui
Last synced: 23 Nov 2024
https://github.com/phpstan/phpstan-beberlei-assert
PHPStan extension for beberlei/assert
assert php php7 phpstan static-analysis static-code-analysis
Last synced: 06 Feb 2025
https://github.com/utkarsh2102/rubocop-packaging
A RuboCop extension focused on enforcing upstream best practices and coding conventions.
code-formatter downstream linter packaging rubocop ruby static-code-analysis upstream
Last synced: 01 Feb 2025
https://github.com/standard/standard-packages
List of packages that use `standard`
development ecmascript ecosystem es6 eslint javascript linter nodejs standard static-code-analysis style style-guide
Last synced: 10 Nov 2024
https://github.com/jayclassless/tidypy
A tool that executes a suite of static analysis tools upon a Python project.
code-quality development linter python static-analysis static-code-analysis tool
Last synced: 16 Jan 2025
https://github.com/priv-kweihmann/systemdlint
Systemd Linter
qatools static-code-analysis systemd
Last synced: 07 Feb 2025
https://github.com/vanhauser-thc/vulntest
Static code analysis test source code
Last synced: 28 Oct 2024
https://github.com/jaredsburrows/android-gradle-java-multi-module-template
Static analysis tools: PMD, Findbugs, Checkstyle, Lint and Jacoco on multi module build with an Android app module, Android library module and a Java module
android-java-multi android-library checkstyle coverage findbugs gradle instrumentation-tests jacoco java lint pmd static static-analysis static-code-analysis
Last synced: 11 Oct 2024
https://github.com/Concurrency-Lab/ParallelHelper
Parallel Helper is a static code analyzer for C# projects that supports the development of parallel and asynchronous code. The analyzer is built with the help of the .NET Compiler Platform (Roslyn) and is available as a NuGet package as well as a Visual Studio extension.
analyzer async asynchronous await best-practices bugs code-quality concurrency csharp dotnet nuget parallel quality-control roslyn static-code-analysis visual-studio
Last synced: 06 Nov 2024
https://github.com/pwittchen/android-quality-starter
setup CheckStyle, FindBugs, PMD and Lint for your Android project easily
android checkstyle findbugs gradle lint pmd quality static-code-analysis
Last synced: 07 Nov 2024
https://github.com/standard/standard-www
:point_up_2: Website for JavaScript Standard Style (@standard)
development ecmascript es6 eslint javascript linter nodejs standard static-code-analysis style style-guide
Last synced: 10 Nov 2024
https://github.com/codeclimate/codeclimate-phpcodesniffer
Code Climate Engine for PHP Code Sniffer
code-quality codeclimate codeclimate-engine hacktoberfest metrics php php-codesniffer quality static-analysis static-code-analysis
Last synced: 12 Nov 2024
https://github.com/riron/effects-mapper
π Effects mapper for @ngrx/effects
angular mapper ngrx reactive rxjs static-code-analysis typescript visualizer
Last synced: 16 Oct 2024
https://github.com/scheb/tombstone-analyzer
[READ ONLY] Report generation for Tombstones created with the scheb/tombstone-logger library
dead-code-removal dynamic-code-analysis static-code-analysis tombstones
Last synced: 04 Feb 2025
https://github.com/metadrop/drupal-boilerplate
Drupal projects up and running with Docker and many other tools in minutes
backstopjs behat boilerplate docker drupal drush starter-kit static-code-analysis template
Last synced: 03 Feb 2025
https://github.com/rentalhost/laravel-insight
IDEA plugin to works with Laravel Framework.
intellij intellij-plugin java laravel laravel-framework php phpstorm phpstorm-plugin static-analysis static-code-analysis
Last synced: 18 Oct 2024
https://github.com/glayzzle/php-reflection
:mag_right: Nodejs Reflection API for PHP files based on the php-parser
php reflection static-code-analysis tooling
Last synced: 13 Nov 2024
https://github.com/evincarofautumn/ward
A static analysis tool for C.
c haskell locking signals static-analysis static-code-analysis
Last synced: 14 Oct 2024
https://github.com/mysticatea/eslint-plugin
ESLint configurations and additional rules for me
ecmascript eslint eslint-plugin javascript static-code-analysis
Last synced: 10 Nov 2024
https://github.com/alisqi/twigqi
TwigQI: Static code analysis for Twig templates
code-quality static-code-analysis twig twig-extension
Last synced: 01 Feb 2025
https://github.com/karlosagudo/fixtro
A QA static analysis code, with a different approach
php php7 qatools static-analysis static-code-analysis
Last synced: 10 Nov 2024
https://github.com/securesauce/precli
Precaution CLI - command line static application security testing tool
command-line go java python sast security security-tools static-analysis static-code-analysis
Last synced: 14 Dec 2024
https://github.com/koic/rubocop-faker
A RuboCop extension for Faker.
converter faker linter rubocop ruby static-code-analysis
Last synced: 02 Feb 2025
https://github.com/jenkinsci/violation-comments-to-gitlab-plugin
Comments GitLab merge requests with static code analyzer findings.
gitlab-plugin jenkins-plugin pipeline static-code-analysis violation-comments
Last synced: 03 Dec 2024
https://github.com/IQTLabs/AuraBorealisApp
Do You Know What's In Your Python Packages? A Tool for Visualizing Python Package Registry Security Audit Data
flask malware pypi registry security security-audit security-tools static-analysis static-code-analysis
Last synced: 21 Nov 2024
https://github.com/dariuszporowski/github-action-gitleaks
This GitHub Action allows you to run Gitleaks in your GitHub workflow.
devsecops github-actions gitleaks sast secrets secrets-detection secrets-management secrets-scan secrets-scanner security-scan security-scanner static-code-analysis
Last synced: 14 Dec 2024
https://github.com/paulveillard/cybersecurity-sast
An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Static Application Security Testing (SAST) Tools.
static-analyzers static-api-generator static-app static-application-security-testing static-binary static-blocks static-build static-code static-code-analysis static-code-analyzer
Last synced: 02 Feb 2025
https://github.com/florentpoujol/php8-type-system
A comprehensive guide of everything related to PHP8.1+ type system and the tools used for static analysis
php static-analysis static-code-analysis
Last synced: 25 Dec 2024
https://github.com/ckaznocha/intrange
intrange is a program for checking for loops that could use the Go 1.22 integer range feature.
go golang lint linter linting static-analysis static-code-analysis style-lint style-linter
Last synced: 15 Dec 2024
https://github.com/jetthoughts/jt_tools
Ruby on Rails Continuous Deployment Ecosystem to maintain Healthy Stable Development
automation ci ci-cd cicd circleci dependency-manager deployment-automation heroku heroku-reviews-apps jetthoughts rails ruby scripts snippets static-code-analysis template tools
Last synced: 06 Nov 2024
https://github.com/phpstan/phpstan-dibi
Dibi class reflection extension for PHPStan
dibi php php7 phpstan static-analysis static-analyzer static-code-analysis testing
Last synced: 01 Nov 2024
https://github.com/tomasbjerre/violations-command-line
Command line tool that will find report files from static code analysis, present and optionally fail the command.
Last synced: 15 Nov 2024
https://github.com/v-thakkar/talks
This repository contains the slides of my talks.
coccinelle ebpf embedded-linux kernel linux security static-code-analysis virtualization xen
Last synced: 27 Oct 2024
https://github.com/iagoabal/eba
EBA is a static bug finder for C.
c static-analysis static-analyzer static-code-analysis
Last synced: 06 Nov 2024
https://github.com/csuarez/symfony2-ci-example
continuous-integration jenkins outdated sample static-code-analysis symfony2 travis-ci
Last synced: 13 Oct 2024
https://github.com/codeclimate/codeclimate-bundler-audit
Code Climate Engine for bundler-audit
bundler-audit code-quality codeclimate codeclimate-engine quality ruby security static-analysis static-code-analysis
Last synced: 12 Nov 2024
https://github.com/tomasbjerre/violation-comments-lib
Library for commenting things with violations from static code analysis.
Last synced: 15 Nov 2024
https://github.com/ccoveille/golangci-lint-config-examples
These are .golangci.yml to go based on your need
configuration-files go golang golangci golangci-lint linter linter-config linters-config static-analysis static-code-analysis
Last synced: 11 Nov 2024
https://github.com/dgkf/scriptgloss
dynamically reconstruct static code for shiny outputs
r reproducibility shiny static-code-analysis
Last synced: 10 Dec 2024
https://github.com/piraces/kube-score-ga
Github action to execute kube-score with selected manifests (YAML, Helm or Kustomize)
analysis automation charts ci github-actions helm kube-score kubernetes linter security static-code-analysis
Last synced: 08 Jan 2025
https://github.com/cmu-sei/scaife-api
Source Code Analysis Integrated Framework Environment (SCAIFE) API: YAML specification
alerts api api-documentation architecture classification restful-api servers static-analysis static-code-analysis yaml
Last synced: 08 Nov 2024
https://github.com/mrseanryan/tslint-folders
:file_folder: Use tslint to check for invalid imports between packages and folders in your TypeScript project. Automatic validation and documentation of package architecture.
analysis architecture checker code-analysis dependencies diagram disabled-tests folders linter linting static-analysis static-code-analysis structure tslint
Last synced: 07 Nov 2024
https://github.com/kitabisa/gokart-action
Integrate GoKart security static analysis to GitHub Actions
actions advanced-security ci code-review gokart golang security static-analysis static-code-analysis static-code-analyzer
Last synced: 07 Nov 2024
https://github.com/konh/unityrefanalyzer
Roslyn code analyzer to find method usages on scenes
code-analysis csharp csharp-code csharp-library game-development gamedev roslyn roslyn-analyzer roslyn-analyzers static-code-analysis unity unity-2d unity-3d unity-editor unity-plugin unity2d unity3d unity3d-plugin unityplugins
Last synced: 20 Jan 2025
https://github.com/tomasbjerre/violation-comments-to-gitlab-command-line
Report static code analysis to GitLab
Last synced: 15 Nov 2024