← voltar

categoria

Static analysis

Inspect source code for bugs, code smells and security issues, and track the findings across branches and pull requests.

Lado a lado

Static analysis
FerramentaEstrelasLicençaTermosAuto-hospedadoLinguagemÚltima releaseÚltimo push
Semgrep17kLGPL-2.1Código abertoSimCv1.179.02026-10-06
SonarQube Community Build11kLGPL-3.0Código abertoSimJava26.9.0.1293882026-10-05
gosec9kApache-2.0Código abertoSimGov2.29.02026-10-05
Bandit8.3kApache-2.0Código abertoSimPython1.9.42026-10-06
Brakeman7.3kOtherCódigo disponívelSimRubyv8.1.02026-10-05
Cppcheck6.8kGPL-3.0Código abertoSimC++2.22.02026-10-06
Opengrep3.1kLGPL-2.1Código abertoSimOCamlv1.30.02026-10-06
Bearer2.8kOtherCódigo disponívelSimGov2.1.12026-10-05
CodeChecker2.6kApache-2.0Código abertoSimPythonv6.29.12026-10-03
MegaLinter2.6kAGPL-3.0Código abertoSimDockerfilev10.1.02026-10-06

10 ferramentas

Semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

Linguagem
C
Licença
LGPL-2.1
Estrelas
17k
Última release
v1.179.0
Último push
2026-10-06
Bandit

Bandit is a tool designed to find common security issues in Python code.

Linguagem
Python
Licença
Apache-2.0
Estrelas
8.3k
Última release
1.9.4
Último push
2026-10-06
Brakeman

A static analysis security vulnerability scanner for Ruby on Rails applications

Linguagem
Ruby
Licença
Other
Estrelas
7.3k
Última release
v8.1.0
Último push
2026-10-05
Opengrep

🔎 Static code analysis engine to find security issues in code.

Linguagem
OCaml
Licença
LGPL-2.1
Estrelas
3.1k
Última release
v1.30.0
Último push
2026-10-06
Bearer

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

Linguagem
Go
Licença
Other
Estrelas
2.8k
Última release
v2.1.1
Último push
2026-10-05
CodeChecker

CodeChecker is an analyzer tooling, defect database and viewer extension for static and dynamic analyzer tools.

Linguagem
Python
Licença
Apache-2.0
Estrelas
2.6k
Última release
v6.29.1
Último push
2026-10-03
MegaLinter

🦙 MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or locally.

Linguagem
Dockerfile
Licença
AGPL-3.0
Estrelas
2.6k
Última release
v10.1.0
Último push
2026-10-06

O que essas ferramentas substituem