static-analysis

ShellCheck, a static analysis tool for shell scripts

A PHP parser written in PHP

A static analyzer for Java, C, C++, and Objective-C

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

A tool to automatically fix PHP Coding Standards issues

PHP Static Analysis Tool - discover bugs in your code without running it!

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

A curated list of static analysis (SAST) tools for all programming languages, config files, build tools, and more.

PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards.

Vulnerability Static Analysis for Containers

Defund the Police.

A static analysis security vulnerability scanner for Ruby on Rails applications

Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.

Useful CMake Examples

Continuous Inspection

🚦 An extensible linter for the TypeScript language

Dockerfile linter, validate inline bash, written in Haskell

Catch common Java mistakes as compile-time errors

Performant type-checking for python.

Golang security checker

Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.

Awesome autocompletion, static analysis and refactoring library for python

A static analysis tool for finding errors in PHP applications

Staticcheck - The advanced Go linter

A static code analysis tool for the Elixir language with a focus on code consistency and teaching.

A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.

static analysis of C/C++ code