ShellCheck, a static analysis tool for shell scripts
-
Updated
Sep 9, 2020 - Haskell
{{ message }}
ShellCheck, a static analysis tool for shell scripts
A static analyzer for Java, C, C++, and Objective-C
A tool to automatically fix PHP Coding Standards issues
PHP Static Analysis Tool - discover bugs in your code without running it!
PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards.
A curated list of static analysis tools for all programming languages, config files, build tools, and more.
Vulnerability Static Analysis for Containers
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Defund the Police.
A static analysis security vulnerability scanner for Ruby on Rails applications
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.
Performant type-checking for python.
Awesome autocompletion, static analysis and refactoring library for python
A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'what's in it' using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.
Golang security checker
A static code analysis tool for the Elixir language with a focus on code consistency and teaching.
A static analysis tool for finding errors in PHP applications
Staticcheck - The advanced Go linter
Code smell detector for Ruby
Useful CMake Examples
Please describe what the rule should do:
Using the tag property for RouterLink or NuxtLink is usually a bad idea because it removes out-of-the-box accessibility (further: vuejs/vue-router-next#148 (comment)). This rule should throw an error if people try to change the tag.
PS: The tag prop will be removed in future majors of vue-router.
static analysis of C/C++ code
Affects PMD Version:
6.17
Rule:
All rulesets.
Description:
PMD output does not inform the user as to the number of rules contravened while running the tool. The user has to look at the output file.
Code Sample demonstrating the issue:
Sep 01, 2019 9:42:45 AM net.sourceforge.pmd.cache.FileAnalysisCache loadFromFile
INFO: Analysis cache loaded
Sep 01, 2019 9:
It's not just a linter that annoys you!
Add a description, image, and links to the static-analysis topic page so that developers can more easily learn about it.
To associate your repository with the static-analysis topic, visit your repo's landing page and select "manage topics."
Add 8.7 and 8.8 for android and ios: show how you can delay the attacker or report tampering to the backend as a response to a tamper detected
8.7: The app implements multiple mechanisms in each defense category (8.1 to 8.6). Note that resiliency scales with the amount, diversity of the originality of the mechanisms used.
8.8: The detection mechanisms trigger responses of different types, includ