-
Updated
Nov 26, 2021 - Haskell
#
static-analysis
Here are 1,287 public repositories matching this topic...
ShellCheck, a static analysis tool for shell scripts
A tool to enforce Swift style and conventions.
-
Updated
Nov 29, 2021 - Swift
A static analyzer for Java, C, C++, and Objective-C
-
Updated
Nov 30, 2021 - OCaml
A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)
android
java
bytecode
compiler
jsp
static-analysis
java-decompiler
decompiler
apk
war
smali
bytecode-viewer
dex2jar
fernflower
cfr
baksmali
procyon
recompiler
krakatau
-
Updated
Nov 18, 2021 - Java
A tool to automatically fix PHP Coding Standards issues
-
Updated
Dec 1, 2021 - PHP
PHP Static Analysis Tool - discover bugs in your code without running it!
-
Updated
Nov 30, 2021 - Nunjucks
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
python
rest
static-analysis
apk
owasp
dynamic-analysis
web-security
malware-analysis
mobsf
android-security
mobile-security
windows-mobile-security
ios-security
mobile-security-framework
api-testing
cwe
devsecops
runtime-security
mstg
masvs
-
Updated
Nov 29, 2021 - Python
analysis
static-code-analysis
linter
static-analysis
awesome-list
code-quality
static-analyzers
sast
-
Updated
Nov 30, 2021 - Rust
PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards.
-
Updated
Nov 28, 2021 - PHP
Vulnerability Static Analysis for Containers
-
Updated
Nov 24, 2021 - Go
The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).
android
ios
static-analysis
reverse-engineering
hacking
mobile-app
android-application
ios-app
dynamic-analysis
pentesting
mobile-security
network-analysis
hacktoberfest
reverse-enginnering
runtime-analysis
mstg
testing-cryptography
compliancy-checklist
-
Updated
Nov 30, 2021 - Shell
Defund the Police.
list
awesome
static-analysis
chinese
dynamic-analysis
awesome-list
malware-analysis
chinese-translation
malware-research
threat-sharing
threatintel
malware-samples
analysis-framework
automated-analysis
network-traffic
threat-intelligence
domain-analysis
malware-collection
drop-ice
-
Updated
Oct 18, 2021
Useful CMake Examples
unit-testing
cmake
tutorial
cpp
catch
boost
static-analysis
clang
cpack
cppcheck
clang-format
google-test
ctest
-
Updated
Nov 7, 2021 - CMake
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
-
Updated
Dec 1, 2021 - Java
A static analysis security vulnerability scanner for Ruby on Rails applications
ruby
rails
security
security-audit
static-analysis
security-vulnerability
vulnerabilities
brakeman
security-tools
-
Updated
Nov 8, 2021 - Ruby
Dockerfile linter, validate inline bash, written in Haskell
docker
dockerfile
haskell
linter
static-analysis
appveyor
travis
shellcheck
ignore-rules
dockerfile-linter
-
Updated
Nov 29, 2021 - Haskell
-
Updated
Mar 25, 2021 - TypeScript
Performant type-checking for python.
python
security
typechecker
static-analysis
ocaml
control-flow-analysis
code-quality
program-analysis
taint-analysis
abstract-interpretation
type-check
-
Updated
Dec 1, 2021 - OCaml
Golang security checker
-
Updated
Nov 24, 2021 - Go
Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.
-
Updated
Nov 30, 2021 - PHP
Awesome autocompletion, static analysis and refactoring library for python
-
Updated
Nov 17, 2021 - Python
kelunik
commented
Nov 22, 2021
Doarakko
commented
May 15, 2021
Many repositories need to fix, so please help if you like.
If you could help, it would be helpful if you could comment before starting the work not to overlapping.
Fix example
Run exit command after lint.
echo '::group:: Running golangci-lint with reviewdog 🐶 ...'
goStaticcheck - The advanced Go linter
-
Updated
Nov 26, 2021 - Go
A static code analysis tool for the Elixir language with a focus on code consistency and teaching.
-
Updated
Nov 28, 2021 - Elixir
3flex
commented
Oct 30, 2021
Expected Behavior of the rule
The empty else block is reported:
fun f() {
var i = 0
if (i == 0) {
println(i)
} else {
}
}Context
EmptyIfBlock is only reporting empty then blocks, not empty else b
Event
Securing LATAM’s leading marketplace with CodeQL
December 03, 2021 • Virtual
Improve this page
Add a description, image, and links to the static-analysis topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the static-analysis topic, visit your repo's landing page and select "manage topics."



Describe the bug
If we type a pattern similar to
def $FUN(..., $X, ...) {...}to match a generic function definition with input being passed into said function, semgrep-core gives a pattern parsing error.To Reproduce
https://semgrep.dev/s/oY79
Expected behavior
Thought that the pattern would parse!
What is the priority of the bug to you?