staticanalysis

Policeman's Forbidden API Checker

njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.

Vulnerability scanning just got lazier

Tool: skeleton is create skeleton codes for golang.org/x/tools/go/analysis.

Generic SAST Library

zagane is a static analysis tool which can find bugs in spanner's code

Analyzer: nilerr checks returning nil when err is not nil

move to https://github.com/gostaticanalysis

Go Linter: finds wasted assignment statements 🗑

Library: Utilities for x/tools/go/analysis package

Analyzer: called is a analyzer which can find function calling

nodejsscan Github Action

A CLI for managing linter executions in git hooks

StaticAnalyzer is a burp plugin that can be used to perform static analysis of the response information from server during run time. It will search for specific words in the response that is mentioned in the vectors.txt

Tool: vetgen is generator of vettools

A tool that automatically fixes source code to pass NullAway checks.

A BASH script to automate simple tasks related to static malware analysis

Analyzer: CommentMap utilities for static analysis in Go

Analyzer: wraperrfmt checks invalid arguments of xerrors.Errorf

Analyzer: check for possible assigning package variables