static-analyzer

PHP Static Analysis Tool - discover bugs in your code without running it!

Mirror kept for legacy. Moved to https://github.com/llvm/llvm-project

Beautiful and understandable static analysis tool for PHP

PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy

Cross-platform static analyzer and linter for Swift.

EMBA - The firmware security analyzer

A Static Code Analyzer for PHP (a PhpStorm/Idea Plugin)

BinAbsInspector: Vulnerability Scanner for Binaries

☕ SonarSource Static Analyzer for Java Code Quality and Security

Static Value-Flow Analysis Framework for Source Code

Next-gen phpDoc parser with support for intersection types and generics

SonarSource Static Analyzer for JavaScript and TypeScript

cwe_checker finds vulnerable patterns in binary executables

Code analyzer for C# and VB.NET projects https://redirect.sonarsource.com/plugins/vbnet.html

prealloc is a Go static analysis tool to find slice declarations that could potentially be preallocated.

🕵️ Haskell STatic ANalyser

Doctrine extensions for PHPStan

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).

[LLVM Static Slicer] Various program analyses, construction of dependence graphs and program slicing of LLVM bitcode.