Results for "tags:static-analysis"

Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code.

A vulnerability scanner for container images and filesystems

A fast and polyglot tool for code searching, linting, rewriting at large scale.

A fast Markdown linter and formatter written in Rust.

Builds a dependency graph for Unity projects so coding agents can trace asset and C# relationships.

An extremely fast Python linter, written in Rust.

Static analysis for GitHub Actions.

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

Static checker for GitHub Actions workflow files

Structural code intelligence & call-graph engine for C# and .NET — built for AI coding agents under hard token budgets

Detect and safely remove dead code in Android projects (Kotlin & Java)

Find bugs in JavaScript programs.

Automatically extract obfuscated strings from malware.

ShellCheck, a static analysis tool for shell scripts

Dockerfile linter, validate inline bash, written in Haskell

Deterministic pre-commit risk detection engine for git diffs.

CredScope is a deterministic, offline-first static credential exposure and reachability analyzer for Docker Compose and GitHub Actions.

OpenSCA-cli is a supply-chain security tool for security researchers and developers.

Analyze Kubernetes YAML files and Helm charts, and check them against a variety of best practices, with a focus on production readiness and security.