← retour

catégorie

Static analysis

Inspect source code for bugs, code smells and security issues, and track the findings across branches and pull requests.

Côte à côte

Static analysis
OutilÉtoilesLicenceConditionsAuto-hébergeableLangageDernière releaseDernier push
Semgrep17kLGPL-2.1Open sourceOuiCv1.179.02026-10-06
SonarQube Community Build11kLGPL-3.0Open sourceOuiJava26.9.0.1293882026-10-05
gosec9kApache-2.0Open sourceOuiGov2.29.02026-10-05
Bandit8.3kApache-2.0Open sourceOuiPython1.9.42026-10-06
Brakeman7.3kOtherSource disponibleOuiRubyv8.1.02026-10-05
Cppcheck6.8kGPL-3.0Open sourceOuiC++2.22.02026-10-06
Opengrep3.1kLGPL-2.1Open sourceOuiOCamlv1.30.02026-10-06
Bearer2.8kOtherSource disponibleOuiGov2.1.12026-10-05
CodeChecker2.6kApache-2.0Open sourceOuiPythonv6.29.12026-10-03
MegaLinter2.6kAGPL-3.0Open sourceOuiDockerfilev10.1.02026-10-06

10 outils

Semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

Langage
C
Licence
LGPL-2.1
Étoiles
17k
Dernière release
v1.179.0
Dernier push
2026-10-06
Bandit

Bandit is a tool designed to find common security issues in Python code.

Langage
Python
Licence
Apache-2.0
Étoiles
8.3k
Dernière release
1.9.4
Dernier push
2026-10-06
Brakeman

A static analysis security vulnerability scanner for Ruby on Rails applications

Langage
Ruby
Licence
Other
Étoiles
7.3k
Dernière release
v8.1.0
Dernier push
2026-10-05
Opengrep

🔎 Static code analysis engine to find security issues in code.

Langage
OCaml
Licence
LGPL-2.1
Étoiles
3.1k
Dernière release
v1.30.0
Dernier push
2026-10-06
Bearer

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

Langage
Go
Licence
Other
Étoiles
2.8k
Dernière release
v2.1.1
Dernier push
2026-10-05
CodeChecker

CodeChecker is an analyzer tooling, defect database and viewer extension for static and dynamic analyzer tools.

Langage
Python
Licence
Apache-2.0
Étoiles
2.6k
Dernière release
v6.29.1
Dernier push
2026-10-03
MegaLinter

🦙 MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or locally.

Langage
Dockerfile
Licence
AGPL-3.0
Étoiles
2.6k
Dernière release
v10.1.0
Dernier push
2026-10-06

Ce que ces outils remplacent