Semgrep rules registry

A parser and static source code analyzer for PL/SQL and Oracle SQL.

🍬A set of tools that keep Java sweet.

OWASP Top 10 - Security Static Code Analyser in Swift

Golang security checker

a static analysis tool for finding vulnerabilities in C/C++ source code

Vulnerability Patterns Detector for C# and VB.NET

C Bounded Model Checker

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.

Analyses your Java and Python applications for open-source dependencies with known vulnerabilities, using both static analysis and testing to determine code context and usage for greater accuracy. …

Pixy is a scanner static code analysis tools that scans PHP applications for security vulnerabilities.

This repository contains a SonarQube plugin implementing C++ support.

Continuous Inspection

A robust parser for C/C++ storing abstract syntax trees, control flow graphs and program dependence graphs in a neo4j graph database.

☕ SonarJava : Java static analyzer for SonarQube & SonarLint

Small utility steps for Jenkins workflows

OpenMRC: Open Source MISRA-C Rule Checker based on Eclipse CDT(C/C++ Development Tooling).

C++ check