ShellCheck, a static analysis tool for shell scripts
-
Updated
Oct 2, 2020 - Haskell
#
static-analysis
Here are 1,014 public repositories matching this topic...
A static analyzer for Java, C, C++, and Objective-C
-
Updated
Oct 13, 2020 - OCaml
A tool to automatically fix PHP Coding Standards issues
-
Updated
Oct 13, 2020 - PHP
PHP Static Analysis Tool - discover bugs in your code without running it!
-
Updated
Oct 12, 2020 - HTML
PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards.
-
Updated
Oct 13, 2020 - PHP
A curated list of static analysis tools for all programming languages, config files, build tools, and more.
static-code-analysis
linter
static-analysis
awesome-list
code-quality
static-analyzers
hacktoberfest
-
Updated
Oct 12, 2020 - Rust
Vulnerability Static Analysis for Containers
-
Updated
Oct 13, 2020 - Go
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
python
rest
static-analysis
apk
owasp
dynamic-analysis
web-security
ipa
malware-analysis
mobsf
android-security
mobile-security
windows-mobile-security
ios-security
mobile-security-framework
api-testing
cwe
devsecops
cvssv2
runtime-security
-
Updated
Oct 13, 2020 - Python
Defund the Police.
list
awesome
static-analysis
chinese
dynamic-analysis
awesome-list
malware-analysis
chinese-translation
malware-research
threat-sharing
threatintel
malware-samples
analysis-framework
automated-analysis
network-traffic
threat-intelligence
domain-analysis
malware-collection
drop-ice
-
Updated
Oct 11, 2020
A static analysis security vulnerability scanner for Ruby on Rails applications
ruby
rails
security
security-audit
static-analysis
security-vulnerability
vulnerabilities
brakeman
security-tools
-
Updated
Oct 10, 2020 - Ruby
-
Updated
Oct 1, 2020 - TypeScript
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
-
Updated
Oct 13, 2020 - Java
Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.
-
Updated
Oct 12, 2020 - PHP
Performant type-checking for python.
python
security
typechecker
static-analysis
ocaml
control-flow-analysis
code-quality
program-analysis
taint-analysis
abstract-interpretation
type-check
-
Updated
Oct 13, 2020 - OCaml
Awesome autocompletion, static analysis and refactoring library for python
-
Updated
Sep 28, 2020 - Python
A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.
detection
static-analysis
security-scanner
security-tools
software-characterization
application-inspector
-
Updated
Oct 7, 2020 - C#
Golang security checker
-
Updated
Oct 7, 2020 - Go
A static code analysis tool for the Elixir language with a focus on code consistency and teaching.
-
Updated
Oct 13, 2020 - Elixir
A static analysis tool for finding errors in PHP applications
-
Updated
Oct 13, 2020 - PHP
Staticcheck - The advanced Go linter
-
Updated
Oct 12, 2020 - Go
Useful CMake Examples
unit-testing
cmake
tutorial
cpp
catch
boost
static-analysis
clang
cpack
cppcheck
clang-format
google-test
ctest
-
Updated
Jul 22, 2020 - CMake
Code smell detector for Ruby
-
Updated
Oct 11, 2020 - Ruby
FloEdelmann
commented
Oct 6, 2020
Please describe what the rule should do:
Since Vue v2.1.0, Vue.nextTick and vm.$nextTick return a Promise if no callback is provided. So both of the following are valid:
Vue.nextTick(callback)Vue.nextTick().then()/await Vue.nextTick()
Or inside components:
this.$nextTick(callback)
static analysis of C/C++ code
-
Updated
Oct 12, 2020 - C++
Fernal73
commented
Sep 1, 2019
Affects PMD Version:
6.17
Rule:
All rulesets.
Description:
PMD output does not inform the user as to the number of rules contravened while running the tool. The user has to look at the output file.
Code Sample demonstrating the issue:
Sep 01, 2019 9:42:45 AM net.sourceforge.pmd.cache.FileAnalysisCache loadFromFile
INFO: Analysis cache loaded
Sep 01, 2019 9:
It's not just a linter that annoys you!
-
Updated
Oct 13, 2020 - Python
Improve this page
Add a description, image, and links to the static-analysis topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the static-analysis topic, visit your repo's landing page and select "manage topics."
Add 8.7 and 8.8 for android and ios: show how you can delay the attacker or report tampering to the backend as a response to a tamper detected
8.7: The app implements multiple mechanisms in each defense category (8.1 to 8.6). Note that resiliency scales with the amount, diversity of the originality of the mechanisms used.
8.8: The detection mechanisms trigger responses of different types, includ