Topic: static-analysis Goto Github

Some thing interesting about static-analysis

👇 Here are 1776 public repositories matching this topic...

analysis-tools-dev / static-analysis

static-analysis,⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.

Organization: analysis-tools-dev

Home Page: https://analysis-tools.dev

static-analysis static-analyzers linter code-quality awesome-list static-code-analysis sast analysis

anchore / grype

static-analysis,A vulnerability scanner for container images and filesystems

Organization: anchore

containers security vulnerability docker golang go static-analysis container-image tool oci

anchore / syft

static-analysis,CLI tool and library for generating a Software Bill of Materials from container images and filesystems

Organization: anchore

containers docker go golang static-analysis tool oci sbom spdx cyclonedx

aquasecurity / tfsec

static-analysis,Security scanner for your Terraform code

Organization: aquasecurity

Home Page: https://aquasecurity.github.io/tfsec

terraform security scanner static-analysis ci aws azure google-cloud-platform compliance infrastructure-as-code

ast-grep / ast-grep

static-analysis,⚡A CLI tool for code structural search, lint and rewriting. Written in Rust

Organization: ast-grep

Home Page: https://ast-grep.github.io/

codemod linter ast babel command-line command-line-tool grep tree-sitter codereview rust

astral-sh / ruff

static-analysis,An extremely fast Python linter and code formatter, written in Rust.

Organization: astral-sh

Home Page: https://docs.astral.sh/ruff

linter pep8 python python3 rust rustpython static-analysis static-code-analysis style-guide styleguide

bridgecrewio / checkov

static-analysis,Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

Organization: bridgecrewio

Home Page: https://www.checkov.io/

terraform static-analysis aws gcp azure aws-security cloudformation scans compliance kubernetes

static-analysis,Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.

Organization: checkstyle

Home Page: https://checkstyle.org

java static-code-analysis command-line-tool static-analysis code-quality

col-e / recaf

static-analysis,The modern Java bytecode editor

User: col-e

Home Page: https://coley.software/Recaf/

java bytecode bytecode-engineering reverse-engineering jvm-bytecode decompile decompiler agent asm javafx-application

crytic / slither

static-analysis,Static Analyzer for Solidity and Vyper

Organization: crytic

Home Page: https://blog.trailofbits.com/2018/10/19/slither-a-solidity-static-analysis-framework/

solidity ethereum static-analysis vyper

danmar / cppcheck

static-analysis,static analysis of C/C++ code

User: danmar

Home Page: https://cppcheck.sourceforge.io/

cppcheck c-plus-plus static-analysis cross-platform c cpp

davidhalter / jedi

static-analysis,Awesome autocompletion, static analysis and refactoring library for python

User: davidhalter

Home Page: http://jedi.readthedocs.io

static-analysis auto-complete python refactoring type-inference

detekt / detekt

static-analysis,Static code analysis for Kotlin

Organization: detekt

Home Page: https://detekt.dev

static analysis kotlin codesmells linter gradle-plugin static-analysis lint code-quality hacktoberfest

didi / booster

static-analysis,🚀Optimizer for mobile applications

Organization: didi

Home Page: https://booster.johnsonlee.io

android bytecode-manipulation gradle-plugin optimizer static-analysis

dominikh / go-tools

static-analysis,Staticcheck - The advanced Go linter

User: dominikh

Home Page: https://staticcheck.dev

linters static-analysis linter staticcheck sponsor

dsherret / ts-morph

static-analysis,TypeScript Compiler API wrapper for static analysis and programmatic code changes.

User: dsherret

Home Page: https://ts-morph.com

typescript ast code-generation javascript static-analysis

dwisiswant0 / apkleaks

static-analysis,Scanning APK file for URIs, endpoints & secrets.

User: dwisiswant0

mobile-security android-security reverse-engineering bugbounty static-analysis apk scanning-apk apk-parser

facebook / infer

static-analysis,A static analyzer for Java, C, C++, and Objective-C

Organization: facebook

Home Page: http://fbinfer.com/

static-analysis static-code-analysis code-quality java c cpp objective-c

facebook / pyre-check

static-analysis,Performant type-checking for python.

Organization: facebook

Home Page: https://pyre-check.org/

python typechecker type-check static-analysis ocaml code-quality abstract-interpretation security program-analysis taint-analysis

google / error-prone

static-analysis,Catch common Java mistakes as compile-time errors

Organization: google

Home Page: https://errorprone.info

java static-analysis

hadolint / hadolint

static-analysis,Dockerfile linter, validate inline bash, written in Haskell

Organization: hadolint

dockerfile linter shellcheck haskell dockerfile-linter docker static-analysis

horsicq / detect-it-easy

static-analysis,Program for determining types of files for Windows, Linux and MacOS.

User: horsicq

Home Page: http://ntinfo.biz

debugger detect unpacker disassembler reverse-engineering elf packer detector binary-analysis program-analysis

koalaman / shellcheck

static-analysis,ShellCheck, a static analysis tool for shell scripts

User: koalaman

Home Page: https://www.shellcheck.net

haskell shell static-analysis bash linter developer-tools

konloch / bytecode-viewer

static-analysis,A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

User: konloch

Home Page: https://bytecodeviewer.com

java-decompiler apk java procyon cfr fernflower krakatau bytecode-viewer bytecode smali

mgechev / revive

static-analysis,🔥 ~6x faster, stricter, configurable, extensible, and beautiful drop-in replacement for golint

User: mgechev

Home Page: https://revive.run

go golang linter static-analysis golint static-code-analysis hacktoberfest

mobsf / mobile-security-framework-mobsf

static-analysis,Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

Organization: mobsf

Home Page: https://opensecurity.in

static-analysis dynamic-analysis mobsf android-security mobile-security windows-mobile-security ios-security api-testing web-security malware-analysis

nikic / php-parser

static-analysis,A PHP parser written in PHP

User: nikic

php parser ast static-analysis

ondrajz / go-callvis

static-analysis,Visualize call graph of a Go program using Graphviz

User: ondrajz

Home Page: https://ofabry.github.io/go-callvis

callgraph graphviz visualization golang golang-tools static-analysis awesome-go

owasp / owasp-mastg

static-analysis,The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

Organization: owasp

Home Page: https://mas.owasp.org/

mobile-app pentesting android-application ios-app runtime-analysis network-analysis static-analysis reverse-engineering dynamic-analysis mobile-security