Top #static-analysis Tools & Software

ruff

github

An extremely fast Python linter and code formatter, written in Rust.

shellcheck

github

ShellCheck, a static analysis tool for shell scripts

phpstan

github

PHP Static Analysis Tool - discover bugs in your code without running it!

PHP_CodeSniffer

github

PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards.

gosec

github

Go security checker

brakeman

github

A static analysis security vulnerability scanner for Ruby on Rails applications

pyre-check

github

Performant type-checking for python.

zizmor

github

Static analysis for GitHub Actions

vulnhuntr

github

Zero shot vulnerability discovery using LLMs

find-sec-bugs

github

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)