Static Analysis
Showing 36 of 865 projects
An open-source platform for continuous code quality inspection and security analysis across 30+ programming languages.
Open-source vulnerability static analysis tool for container images (OCI/Docker) via API-based indexing and matching.
Static vulnerability analysis for container images (OCI/Docker) via an API that indexes and matches against known security flaws.
Automated PHP code upgrades and refactoring tool that instantly updates PHP versions and major frameworks.
Standard libraries and queries for CodeQL, powering GitHub Advanced Security and static application security testing.
A comprehensive, curated collection of tools, research, and resources for Android application security analysis and penetration testing.
A comprehensive, curated collection of tools, research, and resources for Android application security analysis and reverse engineering.
A CLI tool and Go library for generating Software Bill of Materials (SBOM) from container images and filesystems.
A CLI tool and Go library for generating Software Bill of Materials (SBOM) from container images and filesystems.
Automated code review tool that integrates with any linter and posts results as comments on pull requests.
A development tool that helps programmers write Java code adhering to configurable coding standards and best practices.
A comprehensive ESLint plugin providing React-specific linting rules to enforce best practices and catch common errors.
A Go library and toolset for parsing, formatting, and interpreting POSIX Shell, Bash, and Zsh scripts.
A static code analysis tool that scans infrastructure as code, container images, and open source packages for security misconfigurations and vulnerabilities.
A static code analysis tool that scans infrastructure as code, container images, and open source packages for security misconfigurations and vulnerabilities.
A community-driven static code analysis tool that detects errors and potential problems in JavaScript code.
A static analysis tool that scans Go source code for security vulnerabilities by analyzing the AST and SSA representations.
A very fast and accurate code counter with complexity calculations, COCOMO/LOCOMO estimates, and unique line metrics written in pure Go.
A retargetable machine-code decompiler based on LLVM, supporting multiple architectures and file formats.
A static analysis tool for detecting security misconfigurations and flaws in Nginx configuration files.
An opinionated, zero-config ESLint wrapper for JavaScript and TypeScript with great defaults and automatic fixes.
An opinionated, zero-config ESLint wrapper for JavaScript/TypeScript with great defaults and automatic fixes.
A TypeScript validator that maintains 1:1 type-safety from editor to runtime with optimized performance.
A Claude Code plugin marketplace providing AI-assisted skills for security research, vulnerability detection, and audit workflows.
A standalone binary inspection tool for Android developers to browse executables and analyze bytecode.
A static analysis security vulnerability scanner for Ruby on Rails applications.
A static analysis tool for Java that catches common programming mistakes at compile-time.
A performant, incremental type checker for Python with integrated security analysis via Pysa.
A fast type checker and language server for Python with powerful IDE features like code navigation and completion.
A static code analysis tool for Kotlin that identifies code smells and enforces coding standards.
A static analysis security scanner for Terraform code that identifies misconfigurations across major cloud providers.
A static analysis security scanner for Terraform code that identifies misconfigurations across major cloud providers.
A static analysis security scanner for Terraform code that identifies misconfigurations across major cloud providers.
A static analysis security scanner for Terraform code that identifies misconfigurations across major cloud providers.
A state-of-the-art static analysis linter for Go that finds bugs, performance issues, and enforces style rules.
A state-of-the-art static analysis linter for Go that finds bugs, performance issues, and enforces style rules.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.