-
Updated
Feb 16, 2022 - Haskell
#
static-analysis
Here are 1,349 public repositories matching this topic...
ShellCheck, a static analysis tool for shell scripts
A tool to enforce Swift style and conventions.
-
Updated
Mar 7, 2022 - Swift
A static analyzer for Java, C, C++, and Objective-C
-
Updated
Mar 4, 2022 - OCaml
A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)
android
java
bytecode
compiler
jsp
static-analysis
java-decompiler
decompiler
apk
war
smali
bytecode-viewer
dex2jar
fernflower
cfr
baksmali
procyon
recompiler
krakatau
-
Updated
Feb 28, 2022 - Java
A tool to automatically fix PHP Coding Standards issues
-
Updated
Mar 7, 2022 - PHP
PHP Static Analysis Tool - discover bugs in your code without running it!
-
Updated
Mar 7, 2022 - Nunjucks
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
python
rest
static-analysis
apk
owasp
dynamic-analysis
web-security
malware-analysis
mobsf
android-security
mobile-security
windows-mobile-security
ios-security
mobile-security-framework
api-testing
cwe
devsecops
runtime-security
mstg
masvs
-
Updated
Mar 4, 2022 - JavaScript
analysis
static-code-analysis
linter
static-analysis
awesome-list
code-quality
static-analyzers
sast
-
Updated
Mar 6, 2022 - Rust
PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards.
-
Updated
Mar 5, 2022 - PHP
The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).
android
ios
static-analysis
reverse-engineering
hacking
mobile-app
android-application
ios-app
dynamic-analysis
pentesting
mobile-security
network-analysis
hacktoberfest
reverse-enginnering
runtime-analysis
mstg
testing-cryptography
compliancy-checklist
-
Updated
Mar 6, 2022 - Python
Vulnerability Static Analysis for Containers
-
Updated
Mar 4, 2022 - Go
Defund the Police.
list
awesome
static-analysis
chinese
dynamic-analysis
awesome-list
malware-analysis
chinese-translation
malware-research
threat-sharing
threatintel
malware-samples
analysis-framework
automated-analysis
network-traffic
threat-intelligence
domain-analysis
malware-collection
drop-ice
-
Updated
Feb 14, 2022
Useful CMake Examples
unit-testing
cmake
tutorial
cpp
catch
boost
static-analysis
clang
cpack
cppcheck
clang-format
google-test
ctest
-
Updated
Jan 8, 2022 - CMake
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
-
Updated
Mar 7, 2022 - Java
Dockerfile linter, validate inline bash, written in Haskell
docker
dockerfile
haskell
linter
static-analysis
appveyor
travis
shellcheck
ignore-rules
dockerfile-linter
-
Updated
Mar 7, 2022 - Haskell
A static analysis security vulnerability scanner for Ruby on Rails applications
ruby
rails
security
security-audit
static-analysis
security-vulnerability
vulnerabilities
brakeman
security-tools
-
Updated
Feb 26, 2022 - Ruby
-
Updated
Mar 25, 2021 - TypeScript
Golang security checker
-
Updated
Mar 7, 2022 - Go
Performant type-checking for python.
python
security
typechecker
static-analysis
ocaml
control-flow-analysis
code-quality
program-analysis
taint-analysis
abstract-interpretation
type-check
-
Updated
Mar 4, 2022 - OCaml
Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.
-
Updated
Feb 24, 2022 - PHP
Awesome autocompletion, static analysis and refactoring library for python
-
Updated
Jan 19, 2022 - Python
Doarakko
commented
May 15, 2021
Many repositories need to fix, so please help if you like.
If you could help, it would be helpful if you could comment before starting the work not to overlapping.
Fix example
Run exit command after lint.
echo '::group:: Running golangci-lint with reviewdog 🐶 ...'
go
5
alex-dev
commented
Mar 3, 2022
array_column([['a' => 1], ['a' => 2]], null, 'a') should infer a return type of array<int, array{a: int}>.
Staticcheck - The advanced Go linter
-
Updated
Mar 6, 2022 - Go
BraisGabin
commented
Jan 13, 2022
Expected Behavior
assignedExpression violates CanBeNonNullable.
private fun visitAssignment(assignedExpression: KtExpression?) {
if (assignedExpression == null) return
val name = if (assignedExpression is KtQualifiedExpression) {
assignedExpression.selectorExpression
} else {
assignedExpression
}?.text ?: return
assignments.getOrPu
8
A static code analysis tool for the Elixir language with a focus on code consistency and teaching.
-
Updated
Feb 27, 2022 - Elixir
Improve this page
Add a description, image, and links to the static-analysis topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the static-analysis topic, visit your repo's landing page and select "manage topics."

Is your feature request related to a problem? Please describe.
When I'm writing a rule, I want to know what values I can put in the
languageskey.For example, for Terraform, should I put
terraform,hcl, other? Is itcsharp,c#, other?We've already have some drift in the registry where for one "language" we have a number of different keys across many rules. We should instea