static-analysis

An extremely fast Python linter, written in Rust.

Find bugs in JavaScript programs.

OpenSCA-cli is a supply-chain security tool for security researchers and developers.

Static analysis for GitHub Actions.

A fast Markdown linter and formatter written in Rust.

Analyze Kubernetes YAML files and Helm charts, and check them against a variety of best practices, with a focus on production readiness and security.

Deterministic pre-commit risk detection engine for git diffs.

A vulnerability scanner for container images and filesystems

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

A fast and polyglot tool for code searching, linting, rewriting at large scale.

Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code.

CredScope is a deterministic, offline-first static credential exposure and reachability analyzer for Docker Compose and GitHub Actions.

Detect and safely remove dead code in Android projects (Kotlin & Java)

ShellCheck, a static analysis tool for shell scripts

Automatically extract obfuscated strings from malware.

Dockerfile linter, validate inline bash, written in Haskell