static-code-analysis

🌟 JavaScript Style Guide, with linter & automatic code fixer

Find and fix problems in your JavaScript code.

A static analyzer for Java, C, C++, and Objective-C

A Ruby static code analyzer and formatter, based on the community Ruby style guide.

PHP Static Analysis Tool - discover bugs in your code without running it!

⚙️ A curated list of static analysis (SAST) tools for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.

Golang security checker

Prevent Kubernetes misconfigurations from reaching production (again 😤 )! From code to cloud, Datree provides an E2E policy enforcement solution to run automatic checks for rule violations. See our docs: https://hub.datree.io

🐶 Automated code review tool integrated with any code analysis tools regardless of programming language

Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.

Bandit is a tool designed to find common security issues in Python code.

It's not just a linter that annoys you!

An extensible multilanguage static code analyzer.

A static type analyzer for Python code

🔥 ~6x faster, stricter, configurable, extensible, and beautiful drop-in replacement for golint

An extremely fast Python linter, written in Rust.

A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead

SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.