Extensions to the PHP Reflection API, static code scanning, and code generation
-
Updated
Jul 23, 2026 - PHP
#
code-scanning
Here are 195 public repositories matching this topic...
Actions for running CodeQL analysis
-
Updated
Jul 23, 2026 - TypeScript
🚀 Useful README.md, LICENSE, CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, GitHub Issues, Pull Requests and Actions templates to jumpstart your projects.
github template readme issues documentation pr docs bug-tracker labels docs-generator issue code-of-conduct pull-requests documentation-generator code-scanning merge-request code-of-conduct-template github-actions pull-requests-template
-
Updated
Aug 10, 2024 - Python
Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/repo-map/
javascript python java go dart php typescript static-analysis code-quality python-security devsecops ai-agents code-scanning sast github-actions dead-code prompt-injection ai-generated-code ai-code-review dead-code-detection
-
Updated
Jul 22, 2026 - Python
📝 Source repository of Qodana Help
javascript kotlin python java php typescript static-code-analysis continuous-integration ci jetbrains static-analysis code-review code-quality code-scanning
-
Updated
Jul 23, 2026
⚙️ Scan your Go, Java, Kotlin, PHP, Python, JavaScript, TypeScript, .NET projects at GitHub with Qodana. This repository contains Qodana for Azure, GitHub, CircleCI and Gradle
javascript kotlin python java go php typescript static-code-analysis dotnet static-analysis actions code-review code-quality sarif devsecops code-scanning azure-pipelines github-actions azure-extensions qodana
-
Updated
Jul 23, 2026 - JavaScript
🔧 JetBrains Qodana’s official command line tool
javascript kotlin python java cli php typescript static-code-analysis ci code-review code-quality sarif devsecops code-scanning qodana sarif-report
-
Updated
Jul 23, 2026 - Go
Telling tales on you for leaking secrets!
go golang aws security static-analysis secrets git-tool hacktoberfest leak-detection security-tools devsecops code-scanning sarif-report leaking-secrets
-
Updated
Jun 22, 2026 - Go
This repository contains CodeQL queries and libraries which support various Coding Standards.
-
Updated
Jul 22, 2026 - CodeQL
codemillx is a tool for CodeQL, extract the comments in the code and generate codeql module. 强化Go开源项目安全检测(内含开源项目漏洞挖掘方法)
-
Updated
Mar 19, 2022 - Go
NaiveSystems Analyze is a static analysis tool for code security and compliance.
static-analysis cpp14 coding-standards cert cppcheck misra autosar code-scanning functional-safety iso26262 misra-c
-
Updated
Dec 29, 2025 - C++
CI-native security testing for MCP servers. Attack simulation, schema drift detection, and health scoring before agents depend on them.
cli security mcp developer-tools regression-testing sarif code-scanning ai-security github-action supply-chain-security ai-agent model-context-protocol mcp-server agent-security mcp-security schema-drift ai-supply-chain mcp-testing github-code-scanning mcp-ci
-
Updated
Jul 23, 2026 - HTML
High-performance open-source security scanner combining SAST, SCA, Secret Detection, and IaC analysis, built for developers and CI/CD pipelines, using AI for recommendation!
ai static-analysis application-security sca security-scanner devsecops code-scanning vulnerability-scanner cloud-security sast dependency-scanning open-source-security iac-security shift-left-security secret-detection cicd-security ai-remediation
-
Updated
Jul 20, 2026 - Go
Static Code Analysis for security teams with Inter file taint analysis. Built for finding vulnerabilities, advanced structural search, derive insights and supports MCP
security static-code-analysis mcp static-analysis application-security security-tools ai-agents code-scanning sast structural-search mcp-server ai-sast
-
Updated
Jul 10, 2026 - Go
GitHub Advance Security Compliance Action
-
Updated
Dec 14, 2022 - Python
-
Updated
Jul 22, 2026 - Shell
Code scanner to check for issues in prompts and LLM calls
cli security ai linter evaluation code-scanning red-teaming ai-security hallucination ai-evaluation llm prompt-injection llm-security ai-code-review llm-evaluation owasp-llm-top-10 ai-performance ai-red-teaming llm-performance
-
Updated
Apr 6, 2025 - Python
Security scanner for AI-generated ("vibe-coded") code. Runs SAST, DAST, and sandboxed exploit simulation across 15+ languages using 30+ tools. Catches what LLMs introduce before it ships — with AI-powered fixes and PR review integration.
-
Updated
Mar 28, 2026 - Go
CodeScanAI is an open source tool that utilizes powerful AI models (OpenAI, Gemini, and even self-hosted servers) to scan your codebase for possible security vulnerabilities.
-
Updated
Jun 15, 2026 - Python
Codety Scanner is a comprehensive code scanner designed to detect code issues for 30+ programming languages and IaC frameworks. It embeds more than 6,000 code analysis rules and can detect code smells, vulnerable code, secrets in the code, performance issues, style violations, and more.
-
Updated
Jul 20, 2026 - Java
Improve this page
Add a description, image, and links to the code-scanning topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the code-scanning topic, visit your repo's landing page and select "manage topics."