Static Analysis & Code Scanning
5 repos
Tools and frameworks for analyzing source code to detect bugs, security vulnerabilities, and style violations without executing the program. This cluster spans multiple languages—Go, Java, and OCaml—with the most mature projects being Semgrep (pattern-based static analysis), Gosec (Go security scanner), and NullAway (Java null-pointer detection). Whether building new linters, implementing SAST (Static Application Security Testing) engines, or adding analysis passes to existing codebases, you'll find practical implementations of abstract syntax tree traversal, rule matching, and reporting infrastructure.
Go · 2
Java · 1
PHP · 1
Python · 1
static-analysis ·19,017
static-code-analysis ·19,007
static-analyzer ·14,912
phpstan ·14,105
php ·14,105
php7 ·14,105
testing ·14,105
android ·4,105
nullability ·4,105
nullability-analysis ·4,105
