ShellCheck, a static analysis tool for shell scripts
-
Updated
Sep 3, 2020 - Haskell
{{ message }}
ShellCheck, a static analysis tool for shell scripts
A static analyzer for Java, C, C++, and Objective-C
A tool to automatically fix PHP Coding Standards issues
PHP Static Analysis Tool - discover bugs in your code without running it!
PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards.
Static analysis tools for all programming languages, build tools, config files and more.
Vulnerability Static Analysis for Containers
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Defund the Police.
A static analysis security vulnerability scanner for Ruby on Rails applications
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.
Performant type-checking for python.
Awesome autocompletion, static analysis and refactoring library for python
A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'what's in it' using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.
A static code analysis tool for the Elixir language with a focus on code consistency and teaching.
Golang security checker
Staticcheck - The advanced Go linter
A static analysis tool for finding errors in PHP applications
Code smell detector for Ruby
Official ESLint plugin for Vue.js
Useful CMake Examples
Affects PMD Version: 6.26.0
Description:
When an enum switch is exhaustive, there is no reason it should have the default case.
I added this custom rule to prevent that occurence:
<rule name="Exhaustivestatic analysis of C/C++ code
It's not just a linter that annoys you!
Add a description, image, and links to the static-analysis topic page so that developers can more easily learn about it.
To associate your repository with the static-analysis topic, visit your repo's landing page and select "manage topics."
Add 8.7 and 8.8 for android and ios: show how you can delay the attacker or report tampering to the backend as a response to a tamper detected
8.7: The app implements multiple mechanisms in each defense category (8.1 to 8.6). Note that resiliency scales with the amount, diversity of the originality of the mechanisms used.
8.8: The detection mechanisms trigger responses of different types, includ