Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Static analysis
Inspect source code for bugs, code smells and security issues, and track the findings across branches and pull requests.
Änderungen in dieser Kategorie (RSS)
Im Vergleich
| Tool | Sterne | Lizenz | Bedingungen | Selbst hostbar | Sprache | Neuestes Release | Letzter Push |
|---|---|---|---|---|---|---|---|
| Semgrep | 17k | LGPL-2.1 | Open Source | Ja | C | v1.179.0 | 2026-10-06 |
| SonarQube Community Build | 11k | LGPL-3.0 | Open Source | Ja | Java | 26.9.0.129388 | 2026-10-05 |
| gosec | 9k | Apache-2.0 | Open Source | Ja | Go | v2.29.0 | 2026-10-05 |
| Bandit | 8.3k | Apache-2.0 | Open Source | Ja | Python | 1.9.4 | 2026-10-06 |
| Brakeman | 7.3k | Other | Quelltext verfügbar | Ja | Ruby | v8.1.0 | 2026-10-05 |
| Cppcheck | 6.8k | GPL-3.0 | Open Source | Ja | C++ | 2.22.0 | 2026-10-06 |
| Opengrep | 3.1k | LGPL-2.1 | Open Source | Ja | OCaml | v1.30.0 | 2026-10-06 |
| Bearer | 2.8k | Other | Quelltext verfügbar | Ja | Go | v2.1.1 | 2026-10-05 |
| CodeChecker | 2.6k | Apache-2.0 | Open Source | Ja | Python | v6.29.1 | 2026-10-03 |
| MegaLinter | 2.6k | AGPL-3.0 | Open Source | Ja | Dockerfile | v10.1.0 | 2026-10-06 |
10 Tools
Continuous Inspection
- Sprache
- Java
- Lizenz
- LGPL-3.0
- Sterne
- 11k
- Neuestes Release
- 26.9.0.129388
- Letzter Push
- 2026-10-05
Go security checker
- Sprache
- Go
- Lizenz
- Apache-2.0
- Sterne
- 9k
- Neuestes Release
- v2.29.0
- Letzter Push
- 2026-10-05
Bandit is a tool designed to find common security issues in Python code.
- Sprache
- Python
- Lizenz
- Apache-2.0
- Sterne
- 8.3k
- Neuestes Release
- 1.9.4
- Letzter Push
- 2026-10-06
A static analysis security vulnerability scanner for Ruby on Rails applications
static analysis of C/C++ code
🔎 Static code analysis engine to find security issues in code.
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
CodeChecker is an analyzer tooling, defect database and viewer extension for static and dynamic analyzer tools.
- Sprache
- Python
- Lizenz
- Apache-2.0
- Sterne
- 2.6k
- Neuestes Release
- v6.29.1
- Letzter Push
- 2026-10-03
🦙 MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or locally.
- Sprache
- Dockerfile
- Lizenz
- AGPL-3.0
- Sterne
- 2.6k
- Neuestes Release
- v10.1.0
- Letzter Push
- 2026-10-06