Explore Projects

Discover 11 open source projects

Active filters (1):
Search: sast×
Clear all

Showing 1-11 of 11 projects

analysis-tools-dev/static-analysis

A curated list of static analysis (SAST) tools and linters to improve code quality across programming languages.

14.4K
Active
Rust
Linters & Formatters
#sast#static-analysis#code-quality

semgrep/semgrep

Lightweight static code analysis tool that finds bugs and issues across multiple programming languages

14.3K
Active
OCaml
Linters & Formatters
#static-analysis#code-quality#bug-detection

tenable/terrascan

A security tool that detects compliance and security violations in Infrastructure as Code to mitigate risk.

5.2K
Stable
Go
Infrastructure as Code
Security Research
#infrastructure-as-code#security-scanning#compliance

lintsinghua/DeepAudit

Multi-agent AI system for automated code vulnerability detection and security auditing with PoC verification.

5.0K
Active
Python
AI Coding Agents
Code Analysis AI
Python
#vulnerability-scanning#multi-agent-system#code-security

Bearer/bearer

Security scanning tool for detecting and prioritizing security risks in code

2.6K
Active
Go
Go
#security-scanning#static-analysis#vulnerability-detection

ajinabraham/nodejsscan

A static security code scanner for Node.js applications to help identify security vulnerabilities.

2.6K
Stable
CSS
Linters & Formatters
Security Research
Node.js
#security#code-analysis#static-analysis

ASTTeam/CodeQL

CodeQL is a code analysis engine that helps developers find security vulnerabilities in their code.

1.8K
Archived
Security Research
Linters & Formatters
#codeql#security#static-analysis

controlplaneio/kubesec

A security risk analysis tool for Kubernetes resources, helping developers secure their cloud infrastructure.

1.4K
Active
Go
Security Research
Containerization
Go
#kubernetes#security#static-analysis

zinja-coder/jadx-ai-mcp

A Java plugin for JADX that integrates the MCP (Model Context Protocol) server for reverse engineering and pentesting

1.4K
Active
Java
MCP Servers
Penetration Testing
#mcp#reverse-engineering#pentesting

ZupIT/horusec

Horusec is an open-source tool that helps identify vulnerabilities in your project with a single command.

1.3K
Active
Go
Security
Authentication
#security#vulnerabilities#static-analysis

momosecurity/momo-code-sec-inspector-java

IDEA plugin for static code security auditing and automatic vulnerability fixing

1.0K
Archived
Java
IDE Extensions
Security Research
Java
#java#sast#static-code-analysis

Stay in the loop

Get weekly updates on trending AI coding tools and projects.