Static code analyzer for TypeScript
A declarative static analysis tool for jvm bytecode based Datalog like CodeQL
A set of curated exercises to help you prepare for the CKS exam
Static analysis tool that catches 1000+ bug patterns across all popular programming languages, with auto-wiring into AI coding agent quality guardrails
Integrate SonarQube scanner to GitHub Actions
Run a security scan on your terraform with the very nice https://github.com/aquasecurity/tfsec
Agent skills for fallow, codebase intelligence for JavaScript and TypeScript. Teaches AI agents how to find unused code, duplication, circular deps, complexity hotspots, architecture drift, and (with Fallow Runtime) hot-path and cold-path evidence. Works with Claude Code, Cursor, Codex, Gemini CLI, and 30+ agents.
A small guide for C/C++ developers to useful extensions to unleash the power of Visual Studio Code
PHP Static Analysis in Github Actions.
A Github Action for ShellCheck
AI-powered security assessment SKILLS for your codebase. Multi-language (JS, Go, Python, Rust, Java, PHP, Ruby, C#). Works with Claude Code, Codex, OpenCode, etc.
Application Portfolio Auditor is a tool assessing cloud readiness, quality, and security of large sets of apps. It gathers and aggregates insights of multiple software analyzers.
Audit your Claude Code .claude/ setup — scans skills, commands, hooks, agents, and settings for dead refs, weak triggers, token bloat, and skill-listing-budget overflow.
Outside-in replication of Anthropic's Mythos Preview / Project Glasswing — open-source agentic vulnerability-discovery scaffold on Claude Opus 4.7. Eight-phase sink-guided pipeline, ~$1/run, OSS self-scan and coordinated disclosure.
Making CoreOS' Clair easily work in CI/CD pipelines
A methodology for building well-architected codebases with AI assistance. Principles, conventions, and reference implementation. Proven on a 400k LOC Unity project.
Analysing source code locally with SonarQube in a Docker environment.
Native rules, hooks, and guards that prevent Claude Code and Codex from hallucinating code, duplicating files, or shipping unverified changes.
A GitHub Action that automatically identifies anti-patterns in SQL queries using sqlcheck when PR is requested. Please [✩Star] if you're using it!
Add a description, image, and links to the static-analysis topic page so that developers can more easily learn about it.
To associate your repository with the static-analysis topic, visit your repo's landing page and select "manage topics."