⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
-
Updated
Sep 5, 2024 - Rust
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
🐚 GitHub Action for running ShellCheck differentially
Precaution CLI - command line static application security testing tool
Code Pathfinder, the open-source alternative to CodeQL. Designed for precise flow analysis and advanced structural search, it identifies vulnerabilities in source code.
A static analyzer to scan JavaScript code for problematic regular expressions.
Uno strumento che effettua analisi di sicurezza relative a immagini e container Docker in modo automatizzato.
Code Scanning/SAST/Static Analysis/Linting using many tools/Scanners with One Report (Code, IaC) - Betterscan
⚙️ A curated list of static analysis (SAST) tools for all programming languages, config files, build tools, and more. With repository stars⭐ and forks🍴
SecHub provides a central API to test software with different security tools.
OpenScanHub is a service for static and dynamic analysis.
Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.
StackSpot AI Security Action POC
A lightweight static security analysis tool for modern Perl Apps
Exemplos de código e tutoriais para implementações Veracode
Collection of reusable workflows
Validate your IAM Policies and SCPs with AWS Policy Validator, and convert those results into SARIF documents for reporting.
🧪 Correlates Semgrep scans with Python test code coverage for meaningful SAST findings
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Add a description, image, and links to the sast topic page so that developers can more easily learn about it.
To associate your repository with the sast topic, visit your repo's landing page and select "manage topics."