ShellCheck, a static analysis tool for shell scripts
-
Updated
Nov 14, 2020 - Haskell
{{ message }}
ShellCheck, a static analysis tool for shell scripts
A static analyzer for Java, C, C++, and Objective-C
A tool to automatically fix PHP Coding Standards issues
PHP Static Analysis Tool - discover bugs in your code without running it!
PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards.
A curated list of static analysis (SAST) tools for all programming languages, config files, build tools, and more.
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Vulnerability Static Analysis for Containers
Defund the Police.
A static analysis security vulnerability scanner for Ruby on Rails applications
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
Performant type-checking for python.
Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.
Awesome autocompletion, static analysis and refactoring library for python
Golang security checker
Useful CMake Examples
A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.
A static code analysis tool for the Elixir language with a focus on code consistency and teaching.
A static analysis tool for finding errors in PHP applications
Staticcheck - The advanced Go linter
Code smell detector for Ruby
Please describe what the rule should do:
Since Vue v2.1.0, Vue.nextTick and vm.$nextTick return a Promise if no callback is provided. So both of the following are valid:
Vue.nextTick(callback)Vue.nextTick().then() / await Vue.nextTick()Or inside components:
this.$nextTick(callback)static analysis of C/C++ code
Affects PMD Version: 6.30.0-SNAPSHOT
Rule: JUnitAssertionsShouldIncludeMessage
Description:
Code Sample demonstrating the issue:
https://chunk.io/pmd/fc7db65b2c6a46eca4c9a0c3012482e2/diff/spring-framewo
Add a description, image, and links to the static-analysis topic page so that developers can more easily learn about it.
To associate your repository with the static-analysis topic, visit your repo's landing page and select "manage topics."
Add 8.7 and 8.8 for android and ios: show how you can delay the attacker or report tampering to the backend as a response to a tamper detected
8.7: The app implements multiple mechanisms in each defense category (8.1 to 8.6). Note that resiliency scales with the amount, diversity of the originality of the mechanisms used.
8.8: The detection mechanisms trigger responses of different types, includ