analysis-tools-dev / static-analysis Goto Github PK

⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.

Home Page: https://analysis-tools.dev

License: MIT License

Rust 98.19% Makefile 1.81%

analysis awesome-list code-quality linter sast static-analysis static-analyzers static-code-analysis

static-analysis's People

Contributors

Stargazers

Watchers

Forkers

tobmaster wishlam dseguy pluto1010 shaheemirza dieselmachine84 timglabisch vahidn phantomblue u-combinator trietptm-on-coding-algorithms digitalist charles-vdulac dspinellis hummelb jjediny saqibns srve4 awesome-library mnmbb3131 alessio tushartushar scottdillman werockstar creinartz evhub robbinespu claudiouzelac magnologan fishso majinxin2003 apkhook afczys xqx12 corumir jaonlin levonk jansonzhou gdincorell aancw lostpapaver rdifrango awesome-security madnight ne-sachirou untenduplicate security-prince h3xstream why-not-sky dboyliao lancetw gnitnaw ysaaron solualexis cartertsai lihas jszalkowski b1gw00d sils ansonliao tomor pramos furusiyya linus-young lucabongiorni wflk capilicious hason linglongscru qileilove wangwenchao tuochao lemon123456 yucl80 thelongestusernameofall angry7panda alexdeba ajinkyakulkarni vietkhuong saadmahboob yuchen1013 akito19 rajeshveera jijicanyu yash-nisar appchecker alexxn phund sofiaoreis poeblu brndnblck pranavlathigara chebec from1900 panckazzz artisdom aalhour wxywang89 sorakun leonliu315

static-analysis's Issues

Add CodeCharta

Do you want to add CodeCharta in the multiple metrics section?

CodeCharta - Aggregates and visualizes metrics from multiple sources such as Sonar and Git.

houndcli

Have you seen HoundCI ? Thoughts on including it ?
It works a bit like imhotep

JSHint and JSLint are outdated

JSHint or JSLint don't belong in a list with "awesome" in the name as they're severely out of date and pointing users towards them does a disservice. The one up to date and well-maintained linter for JS is ESLint.

Add tools mentioned in the scapegoat linter README file

See https://github.com/sksamuel/scapegoat

NodeJS security scanner

Hi Matthias

I am after a tool to do static analysis on nodeJS. Have you heard about any tool? The closest i have found is a javascript plugin for SonarQube, but it only contains 9 security rules :/

Thanks

CSS-Category?

I stumbled upon https://github.com/brigade/scss-lint and wondered if CSS will be useful as a new category here?
I would vote for yes, because

HTML is there as well
@creinartz can add tons of tools there

Whats your opinion?

Add this list to "awesome"

See https://github.com/sindresorhus/awesome

Link Checker Report

Link Checker

Errors were reported while checking the connectivity of links.

Makefile
awesome.png
awesome.svg
	ERROR	/cc:Work
		Document root directory is not specified
	ERROR	/dc:format
		Document root directory is not specified
	ERROR	/dc:title
		Document root directory is not specified
	ERROR	/rdf:RDF
		Document root directory is not specified
data/README.md
	OK	https://github.com/analysis-tools-dev/static-analysis/blob/master/CONTRIBUTING.md
	OK	https://matthias-endler.de/2017/obsolete/
mkdocs.yml
	ERROR	https://endler.dev/awesome-static-analysis/'
		Not Found (HTTP error 404)
	ERROR	https://github.com/mre'
		Not Found (HTTP error 404)
	ERROR	https://github.com/mre/awesome-static-analysis/'
		Not Found (HTTP error 404)
	ERROR	https://twitter.com/matthiasendler'
		Not Found (HTTP error 404)
	ERROR	https://www.linkedin.com/in/matthiasendler'
		 (HTTP error 999)
data/render/src/templates/README.md
	OK	http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis
	OK	http://www.freepik.com
	OK	https://creativecommons.org/publicdomain/zero/1.0/
	OK	https://en.wikipedia.org/wiki/Static_program_analysis
	OK	https://endler.dev
	OK	https://github.com/analysis-tools-dev/static-analysis/workflows/CI/badge.svg
	OK	https://github.com/dominikh/go-tools
	OK	https://github.com/exakat/php-static-analysis-tools
	OK	https://github.com/mcandre/linters
	OK	https://github.com/mre/awesome-dynamic-analysis
	OK	https://i.creativecommons.org/p/zero/1.0/88x31.png
	OK	https://www.peerlyst.com/posts/a-list-of-static-analysis-tools-for-c-c-peerlyst?utm_source=twitter&utm_medium=social&utm_content=peerlyst_post&utm_campaign=peerlyst_resources
	ERROR	awesome.png
		Stat data/render/src/templates/awesome.png: no such file or directory
	ERROR	{{ other.url | safe }}
		Stat data/render/src/templates/{{ other.url | safe }}: no such file or directory
	ERROR	{{linter.url | safe }}
		Stat data/render/src/templates/{{linter.url | safe }}: no such file or directory
CONTRIBUTING.md
	OK	https://github.com/mre/awesome-static-analysis/issues/223
README.md
	OK	awesome.png
	OK	http://checkerframework.org/
	OK	http://clang-analyzer.llvm.org/xcode.html
	OK	http://clang.llvm.org/extra/clang-tidy/
	OK	http://cs.sensiolabs.org/
	OK	http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis
	OK	http://errorprone.info/
	OK	http://frama-c.com/
	OK	http://golang.org/pkg/testing/
	OK	http://mangothecat.github.io/goodpractice/
	OK	http://oclint.org/
	OK	http://patterson-consulting.net/tds
	OK	http://spinroot.com/cobra/
	OK	http://standardjs.com/
	OK	http://stylelint.io/
	OK	http://tools.android.com/tips/lint
	OK	http://wala.sourceforge.net/wiki/index.php/Main_Page
	OK	http://wapmorgan.github.io/PhpCodeFixer/
	OK	http://www.adacore.com/codepeer
	OK	http://www.cprover.org/cbmc/
	OK	http://www.cprover.org/jbmc/
	OK	http://www.designite-tools.com
	OK	http://www.designite-tools.com/designitejava
	OK	http://www.dwheeler.com/flawfinder/
	OK	http://www.foodcritic.io/
	OK	http://www.freepik.com
	OK	http://www.html-tidy.org/
	OK	http://www.klocwork.com/products-services/klocwork
	OK	http://www.mono-project.com/docs/tools+libraries/tools/gendarme/
	OK	http://www.ndepend.com/
	OK	http://www.nongnu.org/chktex/
	OK	http://www.phpmetrics.org/
	OK	http://www.scalastyle.org
	OK	http://www.sonarqube.org/
	OK	http://www.spark-2014.org/about
	OK	http://www.teamscale.com/
	OK	http://www.veracode.com/products/static-analysis-sast/static-code-analysis
	OK	https://LGTM.com
	OK	https://afterthedeadline.com/
	OK	https://anchore.io/
	OK	https://appscreener.us
	OK	https://atom.io/packages/atom-beautify
	OK	https://bitbucket.org/verateam/vera/wiki/Introduction
	OK	https://carc.codeplex.com/
	OK	https://catless.ncl.ac.uk/Programs/Frink/
	OK	https://clang-analyzer.llvm.org/scan-build.html
	OK	https://coala.io/
	OK	https://coala.io/languages
	OK	https://codeclimate.com/
	OK	https://codefactor.io
	OK	https://creativecommons.org/publicdomain/zero/1.0/
	OK	https://crystal-lang.org/
	OK	https://cyber-security.claranet.fr/en/codepatrol
	OK	https://de.mathworks.com/help/matlab/ref/mlint.html
	OK	https://deepscan.io
	OK	https://deepsource.io/
	OK	https://developer.android.com/studio
	OK	https://developer.apple.com/xcode/
	OK	https://docs.chef.io/cookstyle.html
	OK	https://dotnet-security-guard.github.io/
	OK	https://embold.io
	OK	https://empear.com/
	OK	https://en.wikipedia.org/wiki/Static_program_analysis
	OK	https://endler.dev
	OK	https://find-sec-bugs.github.io/
	OK	https://flow.org/
	OK	https://getpsalm.org/
	OK	https://github.com/360EntSecGroup-Skylar/goreporter
	OK	https://github.com/ActiveState/tdk
	OK	https://github.com/ActiveState/tdk/blob/master/docs/3.0/TDK_3.0_Checker.txt
	OK	https://github.com/Alexia/php7mar
	OK	https://github.com/Andrewsville/PHP-Token-Reflection
	OK	https://github.com/AtomLinter/linter-rust
	OK	https://github.com/CSSLint/csslint
	OK	https://github.com/CodeNarc/CodeNarc
	OK	https://github.com/ContinuumIO/ciocheck
	OK	https://github.com/DavidAnson/markdownlint
	OK	https://github.com/Debian/lintian
	OK	https://github.com/DotNetAnalyzers
	OK	https://github.com/DustinCampbell/CSharpEssentials
	OK	https://github.com/EdgedesignCZ/phpqa
	OK	https://github.com/Ericsson/codechecker
	OK	https://github.com/FriendsOfPHP/PHP-CS-Fixer
	OK	https://github.com/GeoffreyHecht/paprika
	OK	https://github.com/Glavin001/tslint-clean-code
	OK	https://github.com/GoASTScanner/gas
	OK	https://github.com/HairyFotr/linter
	OK	https://github.com/Halleck45/DesignPatternDetector
	OK	https://github.com/HaxeCheckstyle/haxe-checkstyle
	OK	https://github.com/INRIA/spoon
	OK	https://github.com/Instagram/MonkeyType
	OK	https://github.com/JosefPihrt/Roslynator/
	OK	https://github.com/JossWhittle/FlintPlusPlus
	OK	https://github.com/JusticeRage/Manalyze
	OK	https://github.com/Kha/electrolysis
	OK	https://github.com/Kuniwak/vint
	OK	https://github.com/MangoTheCat/cyclocomp
	OK	https://github.com/Manishearth/rust-clippy
	OK	https://github.com/MetricsGrimoire/CMetrics
	OK	https://github.com/Microsoft/DevSkim
	OK	https://github.com/Microsoft/binskim
	OK	https://github.com/Microsoft/pyright
	OK	https://github.com/Microsoft/tslint-microsoft-contrib
	OK	https://github.com/Polymer/polymer-analyzer
	OK	https://github.com/PositiveTechnologies/PT.PM
	OK	https://github.com/PyCQA/bandit
	OK	https://github.com/PyCQA/flake8
	OK	https://github.com/PyCQA/mccabe
	OK	https://github.com/PyCQA/prospector
	OK	https://github.com/PyCQA/pycodestyle
	OK	https://github.com/PyCQA/pydocstyle
	OK	https://github.com/PyCQA/pylint
	OK	https://github.com/Qafoo/QualityAnalyzer
	OK	https://github.com/QafooLabs/php-refactoring-browser
	OK	https://github.com/Quasilyte/go-consistent
	OK	https://github.com/RetireJS/retire.js
	OK	https://github.com/RustSec/advisory-db/
	OK	https://github.com/RustSec/cargo-audit
	OK	https://github.com/SVF-tools/SVF
	OK	https://github.com/StanfordPL/stoke
	OK	https://github.com/Symplify/EasyCodingStandard
	OK	https://github.com/Tencent/TscanCode
	OK	https://github.com/Trismegiste/Mondrian
	OK	https://github.com/ValeLint/vale
	OK	https://github.com/Vannevelj/VSDiagnostics
	OK	https://github.com/Wintellect/Wintellect.Analyzers
	OK	https://github.com/Yelp/undebt
	OK	https://github.com/YorickPeterse/ruby-lint
	OK	https://github.com/adamchainz/multilint
	OK	https://github.com/adrienverge/yamllint
	OK	https://github.com/ajinabraham/NodeJsScan
	OK	https://github.com/alecthomas/gometalinter
	OK	https://github.com/alexkohler/dogsled
	OK	https://github.com/alexkohler/nakedret
	OK	https://github.com/alexkohler/nargs
	OK	https://github.com/alexkohler/prealloc
	OK	https://github.com/alexkohler/unimport
	OK	https://github.com/amaembo/huntbugs
	OK	https://github.com/ambv/black
	OK	https://github.com/amperser/proselint/
	OK	https://github.com/analysis-tools-dev/static-analysis/workflows/CI/badge.svg
	OK	https://github.com/apiology/quality
	OK	https://github.com/arturbosch/detekt
	OK	https://github.com/ashleyglee/TSqlRules
	OK	https://github.com/asm89/twig-lint
	OK	https://github.com/awslabs/cfn-python-lint
	OK	https://github.com/banyanops/collector
	OK	https://github.com/blazeeboy/rubrowser
	OK	https://github.com/bombsimon/wsl
	OK	https://github.com/bridgecrewio/checkov/
	OK	https://github.com/brigade/haml-lint
	OK	https://github.com/brigade/scss-lint
	OK	https://github.com/btford/write-good
	OK	https://github.com/calmh/yardstick
	OK	https://github.com/carlosas/phpat
	OK	https://github.com/cesar-rodriguez/terrascan
	OK	https://github.com/checkstyle/checkstyle
	OK	https://github.com/classgraph/classgraph
	OK	https://github.com/client9/misspell
	OK	https://github.com/clutchski/coffeelint
	OK	https://github.com/code-cracker/code-cracker
	OK	https://github.com/codecombat/aether
	OK	https://github.com/codegram/pelusa
	OK	https://github.com/codespell-project/codespell
	OK	https://github.com/coreos/clair
	OK	https://github.com/csscomb/csscomb.js
	OK	https://github.com/cssstats/cssstats
	OK	https://github.com/cuplv/hopper
	OK	https://github.com/danmar/cppcheck
	OK	https://github.com/davidhalter/jedi
	OK	https://github.com/designsecurity/progpilot
	OK	https://github.com/dlang-community/D-Scanner
	OK	https://github.com/dlint-py/dlint
	OK	https://github.com/dominikh/go-tools
	OK	https://github.com/dominikh/go-tools/tree/master/unused
	OK	https://github.com/dotnet/roslyn-analyzers
	OK	https://github.com/douglascrockford/JSLint
	OK	https://github.com/dpnishant/jsprime
	OK	https://github.com/dspinellis/cqmetrics
	OK	https://github.com/duaraghav8/Solium
	OK	https://github.com/dunglas/phpdoc-to-typehint
	OK	https://github.com/eliasgranderubio/dagda
	OK	https://github.com/es-analysis/plato
	OK	https://github.com/eslint/eslint
	OK	https://github.com/etsy/phan
	OK	https://github.com/exakat/exakat
	OK	https://github.com/exakat/php-static-analysis-tools
	OK	https://github.com/facebook/infer
	OK	https://github.com/facebook/pfff
	OK	https://github.com/facebook/pyre-check
	OK	https://github.com/facebookexperimental/MIRAI
	OK	https://github.com/feddischson/include_gardener
	OK	https://github.com/fimbullinter/wotan
	OK	https://github.com/fkie-cad/cwe_checker
	OK	https://github.com/fsprojects/FSharpLint
	OK	https://github.com/fzipp/gocyclo
	OK	https://github.com/garethr/docker-label-inspector
	OK	https://github.com/go-critic/go-critic
	OK	https://github.com/golang/lint
	OK	https://github.com/golangci/golangci-lint
	OK	https://github.com/google/closure-compiler
	OK	https://github.com/google/closure-linter
	OK	https://github.com/google/error-prone
	OK	https://github.com/google/google-java-format
	OK	https://github.com/google/pytype
	OK	https://github.com/google/shipshape
	OK	https://github.com/google/styleguide/tree/gh-pages/cpplint
	OK	https://github.com/gordonklaus/ineffassign
	OK	https://github.com/groupon/codeburner
	OK	https://github.com/haya14busa/reviewdog
	OK	https://github.com/hchasestevens/bellybutton
	OK	https://github.com/inaka/elvis
	OK	https://github.com/insidersec/insider
	OK	https://github.com/ircmaxell/Tuli
	OK	https://github.com/jakzal/phpqa
	OK	https://github.com/jameysharp/corrode
	OK	https://github.com/jared-stilwell/complexity-report
	OK	https://github.com/jared-stilwell/escomplex
	OK	https://github.com/jarulraj/sqlcheck-old
	OK	https://github.com/jden/quality
	OK	https://github.com/jendrikseipp/vulture
	OK	https://github.com/jgautheron/goconst
	OK	https://github.com/jimhester/lintr
	OK	https://github.com/jkinder/jakstab
	OK	https://github.com/jmolivas/phpqa
	OK	https://github.com/jquery/esprima
	OK	https://github.com/jshint/jshint
	OK	https://github.com/justinabrahms/imhotep
	OK	https://github.com/jwilk/mwic
	OK	https://github.com/kalessil/phpinspectionsea
	OK	https://github.com/katiefenn/parker
	OK	https://github.com/killercup/rustfix
	OK	https://github.com/kisielk/errcheck
	OK	https://github.com/koalaman/shellcheck
	OK	https://github.com/lafolle/flen
	OK	https://github.com/languagetool-org/languagetool
	OK	https://github.com/larshp/abapOpenChecks
	OK	https://github.com/larshp/abaplint
	OK	https://github.com/leighmcculloch/gochecknoglobals
	OK	https://github.com/lequal/i-CodeCNES
	OK	https://github.com/linkedin/qark
	OK	https://github.com/linuxerwang/goroutine-inspect
	OK	https://github.com/lukasmartinelli/hadolint
	OK	https://github.com/lyft/linty_fresh
	OK	https://github.com/makaroni4/sandi_meter
	OK	https://github.com/mamuz/PhpDependencyAnalysis
	OK	https://github.com/mauricioaniche/ck
	OK	https://github.com/mcandre/linters
	OK	https://github.com/mcarton/rust-herbie-lint
	OK	https://github.com/mdempsky/maligned
	OK	https://github.com/mdempsky/unconvert
	OK	https://github.com/mebigfatguy/fb-contrib
	OK	https://github.com/mgechev/codelyzer
	OK	https://github.com/mgechev/revive
	OK	https://github.com/mibk/dupl
	OK	https://github.com/michaeledgar/laser
	OK	https://github.com/microsoft/ApplicationInspector
	OK	https://github.com/microsoft/devskim
	OK	https://github.com/mihaeu/dephpend
	OK	https://github.com/mivok/markdownlint
	OK	https://github.com/mpeterv/luacheck
	OK	https://github.com/mre/awesome-dynamic-analysis
	OK	https://github.com/mre/cargo-inspect
	OK	https://github.com/mrtazz/checkmake
	OK	https://github.com/mschwager/cohesion
	OK	https://github.com/multilang-depends/depends
	OK	https://github.com/mvdan/interfacer
	OK	https://github.com/mvdan/unparam
	OK	https://github.com/nasa-sw-vnv/ikos
	OK	https://github.com/nccgroup/sobelow
	OK	https://github.com/ndmitchell/hlint
	OK	https://github.com/ndmitchell/weeder
	OK	https://github.com/nicklockwood/SwiftFormat
	OK	https://github.com/nickng/dingo-hunter
	OK	https://github.com/nikic/PHP-Parser
	OK	https://github.com/oclint/oclint
	OK	https://github.com/okeuday/pest
	OK	https://github.com/ovr/phpsa
	OK	https://github.com/passy/android-lint-summary
	OK	https://github.com/philipwalton/html-inspector
	OK	https://github.com/php-parallel-lint/PHP-Parallel-Lint
	OK	https://github.com/phpro/grumphp
	OK	https://github.com/phpstan/phpstan
	OK	https://github.com/pocketjoso/specificity-graph
	OK	https://github.com/policeman-tools/forbidden-apis
	OK	https://github.com/povils/phpmnd
	OK	https://github.com/pre-commit/pre-commit
	OK	https://github.com/presidentbeef/brakeman
	OK	https://github.com/prettier/prettier
	OK	https://github.com/projectwallace/css-analyzer
	OK	https://github.com/prontolabs/pronto
	OK	https://github.com/psecio/parse
	OK	https://github.com/puffnfresh/wartremover
	OK	https://github.com/pumasecurity/puma-scan
	OK	https://github.com/purcell/sqlint
	OK	https://github.com/pyflakes/pyflakes/
	OK	https://github.com/python-security/pyt
	OK	https://github.com/python/mypy
	OK	https://github.com/ravenexp/splint
	OK	https://github.com/realm/SwiftLint
	OK	https://github.com/regebro/pyroma
	OK	https://github.com/remarkjs/remark-lint
	OK	https://github.com/rodjek/puppet-lint
	OK	https://github.com/rpm-software-management/rpmlint
	OK	https://github.com/rrrene/credo
	OK	https://github.com/rskuipers/php-assumptions
	OK	https://github.com/rubik/radon
	OK	https://github.com/rubik/xenon
	OK	https://github.com/rubocop-hq/rubocop
	OK	https://github.com/rust-lang-nursery/rls
	OK	https://github.com/rustwasm/twiggy
	OK	https://github.com/rwjblue/ember-template-lint
	OK	https://github.com/sasstools/sass-lint
	OK	https://github.com/sds/slim-lint
	OK	https://github.com/seattlerb/flay
	OK	https://github.com/seattlerb/flog
	OK	https://github.com/sebastianbergmann/phpcpd
	OK	https://github.com/sebastianbergmann/phpdcd
	OK	https://github.com/secure-software-engineering/phasar
	OK	https://github.com/secure-software-engineering/soot-infoflow-android
	OK	https://github.com/sensiolabs-de/deprecation-detector
	OK	https://github.com/sensiolabs-de/deptrac
	OK	https://github.com/shyiko/ktlint
	OK	https://github.com/sideci/goodcheck
	OK	https://github.com/sksamuel/scapegoat
	OK	https://github.com/sleekbyte/tailor
	OK	https://github.com/sorbet/sorbet
	OK	https://github.com/soutaro/querly
	OK	https://github.com/square/cane
	OK	https://github.com/squizlabs/PHP_CodeSniffer
	OK	https://github.com/sstalle/php7cc
	OK	https://github.com/stelligent/cfn_nag
	OK	https://github.com/stripe/safesql
	OK	https://github.com/ternjs/tern
	OK	https://github.com/thesp0nge/dawnscanner
	OK	https://github.com/timakin/bodyclose
	OK	https://github.com/tomasbjerre/violations-lib
	OK	https://github.com/tomzx/php-semver-checker
	OK	https://github.com/tonybaloney/wily
	OK	https://github.com/trailofbits/slither
	OK	https://github.com/troessner/reek
	OK	https://github.com/tsenart/deadcode
	OK	https://github.com/tsqllint/tsqllint
	OK	https://github.com/typescript-eslint/typescript-eslint
	OK	https://github.com/typetools/checker-framework/
	OK	https://github.com/uber/NullAway
	OK	https://github.com/uber/py-find-injection
	OK	https://github.com/uni-bremen-agst/libvcs4j
	OK	https://github.com/veelenga/ameba
	OK	https://github.com/viva64/pvs-studio-check-list
	OK	https://github.com/vlajos/misspell-fixer
	OK	https://github.com/vsiakka/gherkin-lint
	OK	https://github.com/w0rp/ale
	OK	https://github.com/walle/lll
	OK	https://github.com/wapmorgan/PhpCodeAnalyzer
	OK	https://github.com/wata727/tflint
	OK	https://github.com/wemake-services/dotenv-linter
	OK	https://github.com/wemake-services/wemake-python-styleguide
	OK	https://github.com/whitesmith/rubycritic
	OK	https://github.com/willkg/dennis/
	OK	https://github.com/willthames/ansible-lint
	OK	https://github.com/wireghoul/graudit
	OK	https://github.com/xcatliu/cqc
	OK	https://github.com/xojs/xo
	OK	https://github.com/yandex/gixy
	OK	https://github.com/yaniswang/HTMLHint
	OK	https://github.com/yoheimuta/protolint
	OK	https://github.com/zegl/kube-score
	OK	https://gitlab.com/opennota/check
	OK	https://godoc.org/github.com/surullabs/lint/gosimple
	OK	https://godoc.org/golang.org/x/tools/cmd/goimports
	OK	https://golang.org/cmd/gofmt/
	OK	https://golang.org/cmd/vet/
	OK	https://golang.org/cmd/vet/#hdr-Shadowed_variables
	OK	https://golang.org/pkg/go/ast/
	OK	https://golang.org/x/tools/cmd/gotype
	OK	https://graphmycss.com
	OK	https://houndci.com/
	OK	https://i.creativecommons.org/p/zero/1.0/88x31.png
	OK	https://insight.sensiolabs.com/
	OK	https://jsmonk.github.io/hegel
	OK	https://landscape.io/
	OK	https://lgtm.com/
	OK	https://marketplace.visualstudio.com/items?itemName=SharpDevelopTeam.RefactoringEssentialsforVisualStudio
	OK	https://metacpan.org/pod/Perl::Critic
	OK	https://nitpick-ci.com
	OK	https://npo-echelon.ru/en/solutions/appchecker.php
	OK	https://owasp.org/www-project-dependency-check/
	OK	https://pdepend.org/
	OK	https://peganza.com/products_pal.html
	OK	https://peganza.com/products_pex.html
	OK	https://phpmd.org/
	OK	https://pmd.github.io/
	OK	https://railroader.org/
	OK	https://sable.github.io/soot/
	OK	https://scitools.com/ada-programming-essential/
	OK	https://scrutinizer-ci.com/
	OK	https://security-code-scan.github.io/
	OK	https://securityonline.info/owasp-wap-web-application-protection-project/
	OK	https://semmle.com/
	OK	https://sider.review
	OK	https://smartdecscanner.com/
	OK	https://snyk.io/
	OK	https://software.microfocus.com/en-us/products/static-code-analysis-sast/overview
	OK	https://softwaresecured.com/reshift/
	OK	https://sonarcloud.io
	OK	https://sourceforge.net/projects/nagelfar/
	OK	https://spotbugs.github.io/
	OK	https://staticcheck.io/
	OK	https://stil4m.github.io/elm-analyse/
	OK	https://styler.r-lib.org/
	OK	https://submain.com/products/codeit.right.aspx
	OK	https://terraform-compliance.com
	OK	https://unibeautify.com/
	OK	https://vs.sonarlint.org/
	OK	https://www.absint.com/astree/index.htm
	OK	https://www.archunit.org/
	OK	https://www.attackflow.com/Extension
	OK	https://www.axivion.com/en/products-services-9#products_bauhaussuite
	OK	https://www.castsoftware.com/products/highlight
	OK	https://www.checkmarx.com/products/static-application-security-testing/
	OK	https://www.codacy.com/
	OK	https://www.code-inspector.com
	OK	https://www.codeac.io?ref=awesome-static-analysis
	OK	https://www.cppdepend.com
	OK	https://www.ctan.org/pkg/lacheck
	OK	https://www.deepcode.ai/
	OK	https://www.devexpress.com/products/coderush/
	OK	https://www.eclipse.org/cognicrypt/
	OK	https://www.freebsd.org/cgi/man.cgi?query=portlint&sektion=1&manpath=FreeBSD+8.1-RELEASE+and+Ports
	OK	https://www.getcodeflow.com
	OK	https://www.gnu.org/software/gawk/manual/html_node/Options.html
	OK	https://www.grammatech.com/products/codesonar
	OK	https://www.hcltechsw.com/wps/portal/products/appscan/home
	OK	https://www.jarchitect.com
	OK	https://www.jetbrains.com/idea/
	OK	https://www.jetbrains.com/resharper/
	OK	https://www.jetbrains.com/upsource/
	OK	https://www.kiuwan.com/
	OK	https://www.kiuwan.com/code-security-sast/
	OK	https://www.mathworks.com/products/polyspace-ada.html
	OK	https://www.mathworks.com/products/polyspace-bug-finder.html
	OK	https://www.mathworks.com/products/polyspace-code-prover.html
	OK	https://www.peerlyst.com/posts/a-list-of-static-analysis-tools-for-c-c-peerlyst?utm_source=twitter&utm_medium=social&utm_content=peerlyst_post&utm_campaign=peerlyst_resources
	OK	https://www.perforce.com/products/helix-qac
	OK	https://www.phpdoc.org/
	OK	https://www.projectwallace.com
	OK	https://www.ptsecurity.com/ww-en/products/ai/
	OK	https://www.pullrequest.com
	OK	https://www.qualys.com/apps/container-security/
	OK	https://www.quantifiedcode.com/
	OK	https://www.qulice.com/
	OK	https://www.ripstech.com/
	OK	https://www.sourcemeter.com/resources/rpg/
	OK	https://www.synopsys.com/software-integrity/security-testing/static-analysis-sast.html
	OK	https://www.tmssoftware.com/site/fixinsight.asp
	OK	https://www.viva64.com/en/b/0614/
	OK	https://www.viva64.com/en/pvs-studio/
	OK	https://www.whitehatsec.com/products/static-application-security-testing/
	OK	https://xanitizer.com/
	ERROR	http://www.spinellis.gr/sw/ckjm/
		Lookup www.spinellis.gr on 168.63.129.16:53: read udp 172.17.0.2:58957->168.63.129.16:53: i/o timeout
	ERROR	https://ldra.com/
		Forbidden (HTTP error 403)
	ERROR	https://www.spinellis.gr/cscout/
		Lookup www.spinellis.gr on 168.63.129.16:53: read udp 172.17.0.2:58957->168.63.129.16:53: i/o timeout

Use the official "awesome" logo

I would suggest to use their official logo here to make it easier recognizable.

Link Checker Report

Link Checker

Errors were reported while checking the connectivity of links.

Makefile
awesome.svg
	ERROR	/cc:Work
		Document root directory is not specified
	ERROR	/dc:format
		Document root directory is not specified
	ERROR	/dc:title
		Document root directory is not specified
	ERROR	/rdf:RDF
		Document root directory is not specified
awesome.png
mkdocs.yml
	ERROR	https://endler.dev/awesome-static-analysis/'
		Not Found (HTTP error 404)
	ERROR	https://github.com/mre'
		Not Found (HTTP error 404)
	ERROR	https://github.com/mre/awesome-static-analysis/'
		Not Found (HTTP error 404)
	ERROR	https://twitter.com/matthiasendler'
		Not Found (HTTP error 404)
	ERROR	https://www.linkedin.com/in/matthiasendler'
		 (HTTP error 999)
data/README.md
	OK	https://github.com/analysis-tools-dev/static-analysis/blob/master/CONTRIBUTING.md
	OK	https://matthias-endler.de/2017/obsolete/
data/render/src/templates/README.md
	OK	http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis
	OK	http://www.freepik.com
	OK	https://creativecommons.org/publicdomain/zero/1.0/
	OK	https://en.wikipedia.org/wiki/Static_program_analysis
	OK	https://endler.dev
	OK	https://github.com/analysis-tools-dev/static-analysis/workflows/CI/badge.svg
	OK	https://github.com/dominikh/go-tools
	OK	https://github.com/exakat/php-static-analysis-tools
	OK	https://github.com/mcandre/linters
	OK	https://github.com/mre/awesome-dynamic-analysis
	OK	https://i.creativecommons.org/p/zero/1.0/88x31.png
	OK	https://www.peerlyst.com/posts/a-list-of-static-analysis-tools-for-c-c-peerlyst?utm_source=twitter&utm_medium=social&utm_content=peerlyst_post&utm_campaign=peerlyst_resources
	ERROR	awesome.png
		Stat data/render/src/templates/awesome.png: no such file or directory
	ERROR	{{ other.url | safe }}
		Stat data/render/src/templates/{{ other.url | safe }}: no such file or directory
	ERROR	{{linter.url | safe }}
		Stat data/render/src/templates/{{linter.url | safe }}: no such file or directory
CONTRIBUTING.md
	OK	https://github.com/mre/awesome-static-analysis/issues/223
README.md
	OK	awesome.png
	OK	http://checkerframework.org/
	OK	http://clang-analyzer.llvm.org/xcode.html
	OK	http://clang.llvm.org/extra/clang-tidy/
	OK	http://cs.sensiolabs.org/
	OK	http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis
	OK	http://errorprone.info/
	OK	http://frama-c.com/
	OK	http://golang.org/pkg/testing/
	OK	http://mangothecat.github.io/goodpractice/
	OK	http://oclint.org/
	OK	http://patterson-consulting.net/tds
	OK	http://spinroot.com/cobra/
	OK	http://standardjs.com/
	OK	http://stylelint.io/
	OK	http://tools.android.com/tips/lint
	OK	http://wala.sourceforge.net/wiki/index.php/Main_Page
	OK	http://wapmorgan.github.io/PhpCodeFixer/
	OK	http://www.adacore.com/codepeer
	OK	http://www.cprover.org/cbmc/
	OK	http://www.cprover.org/jbmc/
	OK	http://www.designite-tools.com
	OK	http://www.designite-tools.com/designitejava
	OK	http://www.dwheeler.com/flawfinder/
	OK	http://www.foodcritic.io/
	OK	http://www.freepik.com
	OK	http://www.html-tidy.org/
	OK	http://www.klocwork.com/products-services/klocwork
	OK	http://www.mono-project.com/docs/tools+libraries/tools/gendarme/
	OK	http://www.ndepend.com/
	OK	http://www.nongnu.org/chktex/
	OK	http://www.phpmetrics.org/
	OK	http://www.scalastyle.org
	OK	http://www.sonarqube.org/
	OK	http://www.spark-2014.org/about
	OK	http://www.spinellis.gr/sw/ckjm/
	OK	http://www.teamscale.com/
	OK	http://www.veracode.com/products/static-analysis-sast/static-code-analysis
	OK	https://LGTM.com
	OK	https://afterthedeadline.com/
	OK	https://anchore.io/
	OK	https://appscreener.us
	OK	https://atom.io/packages/atom-beautify
	OK	https://bitbucket.org/verateam/vera/wiki/Introduction
	OK	https://carc.codeplex.com/
	OK	https://catless.ncl.ac.uk/Programs/Frink/
	OK	https://clang-analyzer.llvm.org/scan-build.html
	OK	https://coala.io/
	OK	https://coala.io/languages
	OK	https://codeclimate.com/
	OK	https://codefactor.io
	OK	https://creativecommons.org/publicdomain/zero/1.0/
	OK	https://crystal-lang.org/
	OK	https://cyber-security.claranet.fr/en/codepatrol
	OK	https://de.mathworks.com/help/matlab/ref/mlint.html
	OK	https://deepscan.io
	OK	https://deepsource.io/
	OK	https://developer.android.com/studio
	OK	https://developer.apple.com/xcode/
	OK	https://docs.chef.io/cookstyle.html
	OK	https://dotnet-security-guard.github.io/
	OK	https://embold.io
	OK	https://empear.com/
	OK	https://en.wikipedia.org/wiki/Static_program_analysis
	OK	https://endler.dev
	OK	https://find-sec-bugs.github.io/
	OK	https://flow.org/
	OK	https://getpsalm.org/
	OK	https://github.com/360EntSecGroup-Skylar/goreporter
	OK	https://github.com/ActiveState/tdk
	OK	https://github.com/ActiveState/tdk/blob/master/docs/3.0/TDK_3.0_Checker.txt
	OK	https://github.com/Alexia/php7mar
	OK	https://github.com/Andrewsville/PHP-Token-Reflection
	OK	https://github.com/AtomLinter/linter-rust
	OK	https://github.com/CSSLint/csslint
	OK	https://github.com/CodeNarc/CodeNarc
	OK	https://github.com/ContinuumIO/ciocheck
	OK	https://github.com/DavidAnson/markdownlint
	OK	https://github.com/Debian/lintian
	OK	https://github.com/DotNetAnalyzers
	OK	https://github.com/DustinCampbell/CSharpEssentials
	OK	https://github.com/EdgedesignCZ/phpqa
	OK	https://github.com/Ericsson/codechecker
	OK	https://github.com/FriendsOfPHP/PHP-CS-Fixer
	OK	https://github.com/GeoffreyHecht/paprika
	OK	https://github.com/Glavin001/tslint-clean-code
	OK	https://github.com/GoASTScanner/gas
	OK	https://github.com/HairyFotr/linter
	OK	https://github.com/Halleck45/DesignPatternDetector
	OK	https://github.com/HaxeCheckstyle/haxe-checkstyle
	OK	https://github.com/INRIA/spoon
	OK	https://github.com/Instagram/MonkeyType
	OK	https://github.com/JosefPihrt/Roslynator/
	OK	https://github.com/JossWhittle/FlintPlusPlus
	OK	https://github.com/JusticeRage/Manalyze
	OK	https://github.com/Kha/electrolysis
	OK	https://github.com/Kuniwak/vint
	OK	https://github.com/MangoTheCat/cyclocomp
	OK	https://github.com/Manishearth/rust-clippy
	OK	https://github.com/MetricsGrimoire/CMetrics
	OK	https://github.com/Microsoft/DevSkim
	OK	https://github.com/Microsoft/binskim
	OK	https://github.com/Microsoft/pyright
	OK	https://github.com/Microsoft/tslint-microsoft-contrib
	OK	https://github.com/Polymer/polymer-analyzer
	OK	https://github.com/PositiveTechnologies/PT.PM
	OK	https://github.com/PyCQA/bandit
	OK	https://github.com/PyCQA/flake8
	OK	https://github.com/PyCQA/mccabe
	OK	https://github.com/PyCQA/prospector
	OK	https://github.com/PyCQA/pycodestyle
	OK	https://github.com/PyCQA/pydocstyle
	OK	https://github.com/PyCQA/pylint
	OK	https://github.com/Qafoo/QualityAnalyzer
	OK	https://github.com/QafooLabs/php-refactoring-browser
	OK	https://github.com/Quasilyte/go-consistent
	OK	https://github.com/RetireJS/retire.js
	OK	https://github.com/RustSec/advisory-db/
	OK	https://github.com/RustSec/cargo-audit
	OK	https://github.com/SVF-tools/SVF
	OK	https://github.com/StanfordPL/stoke
	OK	https://github.com/Symplify/EasyCodingStandard
	OK	https://github.com/Tencent/TscanCode
	OK	https://github.com/Trismegiste/Mondrian
	OK	https://github.com/ValeLint/vale
	OK	https://github.com/Vannevelj/VSDiagnostics
	OK	https://github.com/Wintellect/Wintellect.Analyzers
	OK	https://github.com/Yelp/undebt
	OK	https://github.com/YorickPeterse/ruby-lint
	OK	https://github.com/adamchainz/multilint
	OK	https://github.com/adrienverge/yamllint
	OK	https://github.com/ajinabraham/NodeJsScan
	OK	https://github.com/alecthomas/gometalinter
	OK	https://github.com/alexkohler/dogsled
	OK	https://github.com/alexkohler/nakedret
	OK	https://github.com/alexkohler/nargs
	OK	https://github.com/alexkohler/prealloc
	OK	https://github.com/alexkohler/unimport
	OK	https://github.com/amaembo/huntbugs
	OK	https://github.com/ambv/black
	OK	https://github.com/amperser/proselint/
	OK	https://github.com/analysis-tools-dev/static-analysis/workflows/CI/badge.svg
	OK	https://github.com/apiology/quality
	OK	https://github.com/arturbosch/detekt
	OK	https://github.com/ashleyglee/TSqlRules
	OK	https://github.com/asm89/twig-lint
	OK	https://github.com/awslabs/cfn-python-lint
	OK	https://github.com/banyanops/collector
	OK	https://github.com/blazeeboy/rubrowser
	OK	https://github.com/bombsimon/wsl
	OK	https://github.com/bridgecrewio/checkov/
	OK	https://github.com/brigade/haml-lint
	OK	https://github.com/brigade/scss-lint
	OK	https://github.com/btford/write-good
	OK	https://github.com/calmh/yardstick
	OK	https://github.com/carlosas/phpat
	OK	https://github.com/cesar-rodriguez/terrascan
	OK	https://github.com/checkstyle/checkstyle
	OK	https://github.com/classgraph/classgraph
	OK	https://github.com/client9/misspell
	OK	https://github.com/clutchski/coffeelint
	OK	https://github.com/code-cracker/code-cracker
	OK	https://github.com/codecombat/aether
	OK	https://github.com/codegram/pelusa
	OK	https://github.com/codespell-project/codespell
	OK	https://github.com/coreos/clair
	OK	https://github.com/csscomb/csscomb.js
	OK	https://github.com/cssstats/cssstats
	OK	https://github.com/cuplv/hopper
	OK	https://github.com/danmar/cppcheck
	OK	https://github.com/davidhalter/jedi
	OK	https://github.com/designsecurity/progpilot
	OK	https://github.com/dlang-community/D-Scanner
	OK	https://github.com/dlint-py/dlint
	OK	https://github.com/dominikh/go-tools
	OK	https://github.com/dotnet/roslyn-analyzers
	OK	https://github.com/douglascrockford/JSLint
	OK	https://github.com/dpnishant/jsprime
	OK	https://github.com/dspinellis/cqmetrics
	OK	https://github.com/duaraghav8/Solium
	OK	https://github.com/dunglas/phpdoc-to-typehint
	OK	https://github.com/eliasgranderubio/dagda
	OK	https://github.com/es-analysis/plato
	OK	https://github.com/eslint/eslint
	OK	https://github.com/etsy/phan
	OK	https://github.com/exakat/exakat
	OK	https://github.com/exakat/php-static-analysis-tools
	OK	https://github.com/facebook/infer
	OK	https://github.com/facebook/pfff
	OK	https://github.com/facebook/pyre-check
	OK	https://github.com/facebookexperimental/MIRAI
	OK	https://github.com/feddischson/include_gardener
	OK	https://github.com/fimbullinter/wotan
	OK	https://github.com/fkie-cad/cwe_checker
	OK	https://github.com/fsprojects/FSharpLint
	OK	https://github.com/fzipp/gocyclo
	OK	https://github.com/garethr/docker-label-inspector
	OK	https://github.com/go-critic/go-critic
	OK	https://github.com/golang/lint
	OK	https://github.com/golangci/golangci-lint
	OK	https://github.com/google/closure-compiler
	OK	https://github.com/google/closure-linter
	OK	https://github.com/google/error-prone
	OK	https://github.com/google/google-java-format
	OK	https://github.com/google/pytype
	OK	https://github.com/google/shipshape
	OK	https://github.com/google/styleguide/tree/gh-pages/cpplint
	OK	https://github.com/gordonklaus/ineffassign
	OK	https://github.com/groupon/codeburner
	OK	https://github.com/haya14busa/reviewdog
	OK	https://github.com/hchasestevens/bellybutton
	OK	https://github.com/inaka/elvis
	OK	https://github.com/insidersec/insider
	OK	https://github.com/ircmaxell/Tuli
	OK	https://github.com/jakzal/phpqa
	OK	https://github.com/jameysharp/corrode
	OK	https://github.com/jared-stilwell/complexity-report
	OK	https://github.com/jared-stilwell/escomplex
	OK	https://github.com/jarulraj/sqlcheck-old
	OK	https://github.com/jden/quality
	OK	https://github.com/jendrikseipp/vulture
	OK	https://github.com/jgautheron/goconst
	OK	https://github.com/jimhester/lintr
	OK	https://github.com/jkinder/jakstab
	OK	https://github.com/jmolivas/phpqa
	OK	https://github.com/jquery/esprima
	OK	https://github.com/jshint/jshint
	OK	https://github.com/justinabrahms/imhotep
	OK	https://github.com/jwilk/mwic
	OK	https://github.com/kalessil/phpinspectionsea
	OK	https://github.com/katiefenn/parker
	OK	https://github.com/killercup/rustfix
	OK	https://github.com/kisielk/errcheck
	OK	https://github.com/koalaman/shellcheck
	OK	https://github.com/lafolle/flen
	OK	https://github.com/languagetool-org/languagetool
	OK	https://github.com/larshp/abapOpenChecks
	OK	https://github.com/larshp/abaplint
	OK	https://github.com/leighmcculloch/gochecknoglobals
	OK	https://github.com/lequal/i-CodeCNES
	OK	https://github.com/linkedin/qark
	OK	https://github.com/linuxerwang/goroutine-inspect
	OK	https://github.com/lukasmartinelli/hadolint
	OK	https://github.com/lyft/linty_fresh
	OK	https://github.com/makaroni4/sandi_meter
	OK	https://github.com/mamuz/PhpDependencyAnalysis
	OK	https://github.com/mauricioaniche/ck
	OK	https://github.com/mcandre/linters
	OK	https://github.com/mcarton/rust-herbie-lint
	OK	https://github.com/mdempsky/maligned
	OK	https://github.com/mdempsky/unconvert
	OK	https://github.com/mebigfatguy/fb-contrib
	OK	https://github.com/mgechev/codelyzer
	OK	https://github.com/mgechev/revive
	OK	https://github.com/mibk/dupl
	OK	https://github.com/michaeledgar/laser
	OK	https://github.com/microsoft/ApplicationInspector
	OK	https://github.com/microsoft/devskim
	OK	https://github.com/mihaeu/dephpend
	OK	https://github.com/mivok/markdownlint
	OK	https://github.com/mpeterv/luacheck
	OK	https://github.com/mre/awesome-dynamic-analysis
	OK	https://github.com/mre/cargo-inspect
	OK	https://github.com/mrtazz/checkmake
	OK	https://github.com/mschwager/cohesion
	OK	https://github.com/multilang-depends/depends
	OK	https://github.com/mvdan/interfacer
	OK	https://github.com/mvdan/unparam
	OK	https://github.com/nasa-sw-vnv/ikos
	OK	https://github.com/nccgroup/sobelow
	OK	https://github.com/ndmitchell/hlint
	OK	https://github.com/ndmitchell/weeder
	OK	https://github.com/nicklockwood/SwiftFormat
	OK	https://github.com/nickng/dingo-hunter
	OK	https://github.com/nikic/PHP-Parser
	OK	https://github.com/oclint/oclint
	OK	https://github.com/okeuday/pest
	OK	https://github.com/ovr/phpsa
	OK	https://github.com/passy/android-lint-summary
	OK	https://github.com/philipwalton/html-inspector
	OK	https://github.com/php-parallel-lint/PHP-Parallel-Lint
	OK	https://github.com/phpro/grumphp
	OK	https://github.com/phpstan/phpstan
	OK	https://github.com/pocketjoso/specificity-graph
	OK	https://github.com/policeman-tools/forbidden-apis
	OK	https://github.com/povils/phpmnd
	OK	https://github.com/pre-commit/pre-commit
	OK	https://github.com/presidentbeef/brakeman
	OK	https://github.com/prettier/prettier
	OK	https://github.com/projectwallace/css-analyzer
	OK	https://github.com/prontolabs/pronto
	OK	https://github.com/psecio/parse
	OK	https://github.com/puffnfresh/wartremover
	OK	https://github.com/pumasecurity/puma-scan
	OK	https://github.com/purcell/sqlint
	OK	https://github.com/pyflakes/pyflakes/
	OK	https://github.com/python-security/pyt
	OK	https://github.com/python/mypy
	OK	https://github.com/ravenexp/splint
	OK	https://github.com/realm/SwiftLint
	OK	https://github.com/regebro/pyroma
	OK	https://github.com/remarkjs/remark-lint
	OK	https://github.com/rodjek/puppet-lint
	OK	https://github.com/rpm-software-management/rpmlint
	OK	https://github.com/rrrene/credo
	OK	https://github.com/rskuipers/php-assumptions
	OK	https://github.com/rubik/radon
	OK	https://github.com/rubik/xenon
	OK	https://github.com/rubocop-hq/rubocop
	OK	https://github.com/rust-lang-nursery/rls
	OK	https://github.com/rustwasm/twiggy
	OK	https://github.com/rwjblue/ember-template-lint
	OK	https://github.com/sasstools/sass-lint
	OK	https://github.com/sds/slim-lint
	OK	https://github.com/seattlerb/flay
	OK	https://github.com/seattlerb/flog
	OK	https://github.com/sebastianbergmann/phpcpd
	OK	https://github.com/sebastianbergmann/phpdcd
	OK	https://github.com/secure-software-engineering/phasar
	OK	https://github.com/secure-software-engineering/soot-infoflow-android
	OK	https://github.com/sensiolabs-de/deprecation-detector
	OK	https://github.com/sensiolabs-de/deptrac
	OK	https://github.com/shyiko/ktlint
	OK	https://github.com/sideci/goodcheck
	OK	https://github.com/sksamuel/scapegoat
	OK	https://github.com/sleekbyte/tailor
	OK	https://github.com/sorbet/sorbet
	OK	https://github.com/soutaro/querly
	OK	https://github.com/square/cane
	OK	https://github.com/squizlabs/PHP_CodeSniffer
	OK	https://github.com/sstalle/php7cc
	OK	https://github.com/stelligent/cfn_nag
	OK	https://github.com/stripe/safesql
	OK	https://github.com/ternjs/tern
	OK	https://github.com/thesp0nge/dawnscanner
	OK	https://github.com/timakin/bodyclose
	OK	https://github.com/tomasbjerre/violations-lib
	OK	https://github.com/tomzx/php-semver-checker
	OK	https://github.com/tonybaloney/wily
	OK	https://github.com/trailofbits/slither
	OK	https://github.com/troessner/reek
	OK	https://github.com/tsenart/deadcode
	OK	https://github.com/tsqllint/tsqllint
	OK	https://github.com/typescript-eslint/typescript-eslint
	OK	https://github.com/typetools/checker-framework/
	OK	https://github.com/uber/NullAway
	OK	https://github.com/uber/py-find-injection
	OK	https://github.com/uni-bremen-agst/libvcs4j
	OK	https://github.com/veelenga/ameba
	OK	https://github.com/viva64/pvs-studio-check-list
	OK	https://github.com/vlajos/misspell-fixer
	OK	https://github.com/vsiakka/gherkin-lint
	OK	https://github.com/w0rp/ale
	OK	https://github.com/walle/lll
	OK	https://github.com/wapmorgan/PhpCodeAnalyzer
	OK	https://github.com/wata727/tflint
	OK	https://github.com/wemake-services/dotenv-linter
	OK	https://github.com/wemake-services/wemake-python-styleguide
	OK	https://github.com/whitesmith/rubycritic
	OK	https://github.com/willkg/dennis/
	OK	https://github.com/willthames/ansible-lint
	OK	https://github.com/wireghoul/graudit
	OK	https://github.com/xcatliu/cqc
	OK	https://github.com/xojs/xo
	OK	https://github.com/yandex/gixy
	OK	https://github.com/yaniswang/HTMLHint
	OK	https://github.com/yoheimuta/protolint
	OK	https://github.com/zegl/kube-score
	OK	https://gitlab.com/opennota/check
	OK	https://godoc.org/github.com/surullabs/lint/gosimple
	OK	https://godoc.org/golang.org/x/tools/cmd/goimports
	OK	https://golang.org/cmd/gofmt/
	OK	https://golang.org/cmd/vet/
	OK	https://golang.org/cmd/vet/#hdr-Shadowed_variables
	OK	https://golang.org/pkg/go/ast/
	OK	https://golang.org/x/tools/cmd/gotype
	OK	https://graphmycss.com
	OK	https://houndci.com/
	OK	https://i.creativecommons.org/p/zero/1.0/88x31.png
	OK	https://insight.sensiolabs.com/
	OK	https://jsmonk.github.io/hegel
	OK	https://landscape.io/
	OK	https://lgtm.com/
	OK	https://metacpan.org/pod/Perl::Critic
	OK	https://nitpick-ci.com
	OK	https://npo-echelon.ru/en/solutions/appchecker.php
	OK	https://pdepend.org/
	OK	https://peganza.com/products_pal.html
	OK	https://peganza.com/products_pex.html
	OK	https://phpmd.org/
	OK	https://pmd.github.io/
	OK	https://railroader.org/
	OK	https://sable.github.io/soot/
	OK	https://scitools.com/ada-programming-essential/
	OK	https://scrutinizer-ci.com/
	OK	https://security-code-scan.github.io/
	OK	https://semmle.com/
	OK	https://sider.review
	OK	https://smartdecscanner.com/
	OK	https://snyk.io/
	OK	https://software.microfocus.com/en-us/products/static-code-analysis-sast/overview
	OK	https://softwaresecured.com/reshift/
	OK	https://sonarcloud.io
	OK	https://sourceforge.net/projects/nagelfar/
	OK	https://spotbugs.github.io/
	OK	https://staticcheck.io/
	OK	https://stil4m.github.io/elm-analyse/
	OK	https://styler.r-lib.org/
	OK	https://submain.com/products/codeit.right.aspx
	OK	https://terraform-compliance.com
	OK	https://unibeautify.com/
	OK	https://vs.sonarlint.org/
	OK	https://www.absint.com/astree/index.htm
	OK	https://www.archunit.org/
	OK	https://www.attackflow.com/Extension
	OK	https://www.axivion.com/en/products-services-9#products_bauhaussuite
	OK	https://www.castsoftware.com/products/highlight
	OK	https://www.checkmarx.com/products/static-application-security-testing/
	OK	https://www.codacy.com/
	OK	https://www.code-inspector.com
	OK	https://www.codeac.io?ref=awesome-static-analysis
	OK	https://www.cppdepend.com
	OK	https://www.ctan.org/pkg/lacheck
	OK	https://www.deepcode.ai/
	OK	https://www.devexpress.com/products/coderush/
	OK	https://www.eclipse.org/cognicrypt/
	OK	https://www.freebsd.org/cgi/man.cgi?query=portlint&sektion=1&manpath=FreeBSD+8.1-RELEASE+and+Ports
	OK	https://www.getcodeflow.com
	OK	https://www.gnu.org/software/gawk/manual/html_node/Options.html
	OK	https://www.grammatech.com/products/codesonar
	OK	https://www.hcltechsw.com/wps/portal/products/appscan/home
	OK	https://www.jarchitect.com
	OK	https://www.jetbrains.com/idea/
	OK	https://www.jetbrains.com/resharper/
	OK	https://www.jetbrains.com/upsource/
	OK	https://www.kiuwan.com/
	OK	https://www.kiuwan.com/code-security-sast/
	OK	https://www.mathworks.com/products/polyspace-ada.html
	OK	https://www.mathworks.com/products/polyspace-bug-finder.html
	OK	https://www.mathworks.com/products/polyspace-code-prover.html
	OK	https://www.peerlyst.com/posts/a-list-of-static-analysis-tools-for-c-c-peerlyst?utm_source=twitter&utm_medium=social&utm_content=peerlyst_post&utm_campaign=peerlyst_resources
	OK	https://www.perforce.com/products/helix-qac
	OK	https://www.phpdoc.org/
	OK	https://www.projectwallace.com
	OK	https://www.ptsecurity.com/ww-en/products/ai/
	OK	https://www.pullrequest.com
	OK	https://www.quantifiedcode.com/
	OK	https://www.qulice.com/
	OK	https://www.ripstech.com/
	OK	https://www.sourcemeter.com/resources/rpg/
	OK	https://www.spinellis.gr/cscout/
	OK	https://www.synopsys.com/software-integrity/security-testing/static-analysis-sast.html
	OK	https://www.tmssoftware.com/site/fixinsight.asp
	OK	https://www.viva64.com/en/b/0614/
	OK	https://www.viva64.com/en/pvs-studio/
	OK	https://www.whitehatsec.com/products/static-application-security-testing/
	OK	https://xanitizer.com/
	ERROR	http://vsrefactoringessentials.com/
		Lookup vsrefactoringessentials.com on 168.63.129.16:53: no such host
	ERROR	https://github.com/dominikh/go-tools/tree/master/cmd/unused
		Not Found (HTTP error 404)
	ERROR	https://layeredinsight.com/
		X509: certificate is valid for www.qualys.com, qualys.com, not layeredinsight.com
	ERROR	https://ldra.com/
		Forbidden (HTTP error 403)
	ERROR	https://www.owasp.org/index.php/OWASP_Dependency_Check
		Not Found (HTTP error 404)
	ERROR	https://www.owasp.org/index.php/OWASP_WAP-Web_Application_Protection
		Not Found (HTTP error 404)

Are these tools awesome?

I started compiling a list of SAST tools as part of a research assignment, only to stumble upon this awesome list. I noted that several of the tools I found are not yet listed, however I have no idea whether the tools I found are 'awesome'... For some of them I could find some objective proof (e.g. the Gartner Magic Quadrant for SAST tools), and so I created some PRs already.

PRs created for:

AppScan Source HCL #277
WhiteHat Sentinel Source #279
Synopsys Coverity #280
Checkmarx CxSAST #278

Not sure if awesome:

Appknox (Online scanner)
bugScout (multiple languages such as Java, PHP, .NET and classic ASP)
Code Dx Enterprise (Correlation engine bundled with SAST/DAST/IAST/other tools)
Devknox (Android, will become open source soon, no longer supported officially)
Jtest (Java)
Ripstech
Snappy Tick
Sparrow SAST (Support over 20 languages including Java, JSP, C/C++, C#, Python, Swift, ASP(.NET), ABAP, Object C, etc)
ThunderScan (Multilanguage)
TrueCode
Virtual Forge Security Suite (SAP)
VisualCodeGrepper (VCG is an automated code security review tool that handles C/C++, Java, C#, VB and PL/SQL)
Xanitizer (Java/Scala)
ZeroNorth

Any feedback on the above tools is welcome. If any of the tools is found to be awesome, let me know and I will create PRs.

Use a machine-readable format for the list

Validating the list entries and adding new tools could be easier by using a proper data-exchange format like YAML for storing all entries.

The way I imagine this to work is that we have a data.yml file, which contains all linters.

- name: My Linter
  url: https://www.example.com
  proprietary: True
  description: Static code analysis for C and PHP code.
  lints: ["php", "containers", "packages"]
  type: "tool"

The lints could be any programming language or category we have in the README.md right now.
The type can be any of tool, webservice, or collection.

This would be rendered into the human-readable format from the README.md that we have right now.

Required steps:

Think about edge-cases where the above format wouldn't work
Agree on format
Rewrite existing list to YAML
Rewrite parser for tools located in /ci folder
Update Travis CI to render the YAML file as a human readable README.md and push to master.
Update CONTRIBUTING.md
Create a pull request with these changes.

This is quite a big change, but I think it's worth it, because it will make contributing and testing the tools much easier. Also it paves the way for providing different ways for using the list, such as through an API, as a Website with different categories for tools, or as a tool for suggesting linters to IDEs.

Frama-C

Frama-C is missing.

MultiRipper

I want to suggest a tool I have written for rip data from executable

MultiRipper : https://github.com/matteobaccan/MultiRipper

You may want to add lizard

You may want to add lizard for C/C++ (works with C++14), Java, C# (C Sharp), JavaScript, Objective C, Swift, Python, Ruby, TTCN-3, PHP, Scala and GDScript languages

https://github.com/terryyin/lizard

Add missing tools from zalas.eu

Link here: http://zalas.eu/phpqa-static-analysis-tools-for-php-docker-image/

Random

import java.util.Random;

Adding IDEs as a section

Would adding IDEs as a separate section be useful? For example IDEs like Jetbrains IDEA and Android Studio comes bundled with tools like idea-inspector and android lint. They also provide a lot of tools functionality for refactoring, extracting, reordering of methods, auto-formatting - using static analysis. Can create a PR for it if you think it is a good idea.

Possible Suggestion: Add star count to github projects

This is a great resource for a lot of tools that a reader may not initially be familiar with. However, deciding what to use can get a little difficult without a sense of what's popular in the community. One metric (not saying it's the only one) of determining the "popularity" of a tool is the star count of the associated github repo - e.g.

bandit - a tool to find common security issues in Python code
black - The uncompromising Python code formatter

I wouldn't want to imply one is better than the other in this case, but I think counts like this may provide helpful information for someone new to a language/these tools trying to decide what to use.

If there's interest in this I could submit a PR adding some type of badge to the lines that are github links?

Top-Link at website links to https://awesome-static-analysis.com/

The link at the hat (top left corner) at https://matthias-endler.de/awesome-static-analysis/ links to a non-existing website https://awesome-static-analysis.com/

PMD is not a Java-only tool

Currently PMD is listed under Java, but in truth it's a multi-language tool.

It currently supports:

Salesforce.com's APEX
Java
JavaScript
PLSQL
Apache Velocity
XML
XSL

The next version (5.6.0) will also include support for Salesforce.com's Visualforce.

Also, the CPD tool, which is part of PMD, and searches for duplicate code works on:

Java
C
C++
C#
Groovy
PHP
Ruby
Fortran
JavaScript
PLSQL
Apache Velocity
Scala
Objective C
Matlab
Python
Go
Swift
Salesforce.com Apex

Once again, the next version (5.6.0) will also include support for Salesforce.com's Visualforce.

There is even a big project for this year that will move several of these CPD-only supported languages to fully-supported.

Thanks in advanced!

add codechecker as C/C++ tool

as title

Wikipedia

Hello!

I think you know this but there are list at wikipedia containing static analysis tools.

https://de.wikipedia.org/wiki/Liste_von_Werkzeugen_zur_statischen_Codeanalyse
https://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis

Add WALA for Java and JavaScript

http://wala.sourceforge.net/wiki/index.php/Main_Page

Merge exakat/php-static-analysis-tools

I found https://github.com/exakat/php-static-analysis-tools

Maybe there are some tools that are not listed here and it might make sense to complete awesome-static-analysis with those even more :)

Linter for Make files

Checkout https://github.com/mrtazz/checkmake

I wonder in which category this tool will fall ?

Request to support Delphi/Pascal language

Pascal (either Delphi or FreePascal)

list of open source writing assistance and english linting tools

Thanks for the great list. Here I have listed other available writing assistance tools, and here some of the available plagiarism checker tools. There are also other linting tools available:

Add csi_scapm

https://github.com/ninp0/csi

LibVCS4j

I propose to add https://github.com/uni-bremen-agst/libvcs4j. The library allows existing analysis tools to examine the evolution of software systems by providing a common API for different version control systems and issue trackers. Furthermore, there is a subproject that is capable of collecting different size and complexity related metrics for several programming languages (using the ConQAT scanner library).

Does my library, violations-lib, belong here?

I develop this library: https://github.com/tomasbjerre/violations-lib

I would happily have it added, if you feel it belongs here?

IDEA Inspection plugin

https://github.com/JetBrains/inspection-plugin can be used in Java, Kotlin and Android projects and includes all the inspections that are available in the IntelliJ IDE. Where is the appropriate section for this tool?

It is applied to any gradle project, so i guess the Multiple languages section would be appropriate?

lintr isn't proprietary

Hi. The lintr package for R isn't a propriatary tool; but your list suggests that it is. It was released on an MIT license. see here

JS Dependencies Scanner

I found this tool : https://github.com/RetireJS/retire.js , though, I am kinda hesitating about adding the tool to the list, because it's not a pure static code analysis. What do you think?

Add cqc (Code Quality Checker)

Hi, I've written a tool to check the code quality of JavaScript, here is the link: https://github.com/xcatliu/cqc
Could you please help review if this can be added to the awesome list?
Thanks!

Markdown not completely rendered

At least :warning:, :copyright: and so on are not rendered on the website.

Containers: Recommended adds

@mre WRT Containers, how about:
+

Thanks!
~G

Quantifiedcode now open-source

Hi,

It seems quantifiedcode is now open-source. Also I'm not sure it's really maintained.

TSanCode should be TScanCode

Hi and thanks for an awesome list.

I have recently discovered TscanCode from Tencent and noticed that the spelling on this list has a typo: it says TsanCode instead of TscanCode.

I don't feel that such a one-character edit merits a PR ?

FWIW TscanCode seems to be built on cppcheck, but it finds issues that cppcheck doesn't, given the same code base. It is somewhat slower than cppcheck, but works in a similar manner (on token streams).

Have a nice day

Activity check

@mre Hi. I haven't seen much activity from you lately toward this project. Is everything okay? As you see, there have been outstanding PRs, etc. Thanks.

Add tools from gometalinter

There's a long list of linters on the link above. We could add them.

tis-interpreter and sanitizers

Hello,

tis-interpreter is not a static analyzer, it basically does runtime analysis.

Should we remove it?
Should we create an "awesome-dynamic-analysis" repo?

If you want to keep it, then there are plenty of other runtime analysis tools (ASAN/UBSan/etc) that should be listed here too.

should CppDepend be removed?

I clicked through to CppDepend and tried to download the 14-day trial version, which required me to first enter my email. After I did, and clicked the download link, I got this email

Hello,

Thanks for your interest in achieving higher code quality with CppDepend.

Our technical team will contact you shortly with your download link for CppDepend on Linux.

Best regards and have a nice day.

The CppDepend team

That was on Jun 24th. I never heard back until today, July 15th, when I got this email, with no "unsubscribe" link:

Hello,

We are happy to announce that CppDepend v2019.2 for Linux has been released and is now available for download!

You can download CppDepend v2019.2 here:
https://www.cppdepend.com/Thank-You-For-Downloading-CppDepend?os=L64

To install CppDepend, just unzip the files in a private application folder on your machine.

Check out the online documentation to quickly learn how to begin analyzing your first project: https://www.cppdepend.com/GettingStartedForLinux

Watch more videos to get started with each feature here: https://www.cppdepend.com/videos

Your feedback is welcome at [email protected]

Happy Hunting!

The CoderGears Team.

Link Checker Report

Link Checker

Errors were reported while checking the connectivity of links.

awesome.png
Makefile
awesome.svg
	ERROR	/cc:Work
		Document root directory is not specified
	ERROR	/dc:format
		Document root directory is not specified
	ERROR	/dc:title
		Document root directory is not specified
	ERROR	/rdf:RDF
		Document root directory is not specified
mkdocs.yml
	ERROR	https://endler.dev/awesome-static-analysis/'
		Not Found (HTTP error 404)
	ERROR	https://github.com/mre'
		Not Found (HTTP error 404)
	ERROR	https://github.com/mre/awesome-static-analysis/'
		Not Found (HTTP error 404)
	ERROR	https://twitter.com/matthiasendler'
		Not Found (HTTP error 404)
	ERROR	https://www.linkedin.com/in/matthiasendler'
		 (HTTP error 999)
data/README.md
	OK	https://github.com/analysis-tools-dev/static-analysis/blob/master/CONTRIBUTING.md
	OK	https://matthias-endler.de/2017/obsolete/
data/render/src/templates/README.md
	OK	http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis
	OK	http://www.freepik.com
	OK	https://creativecommons.org/publicdomain/zero/1.0/
	OK	https://en.wikipedia.org/wiki/Static_program_analysis
	OK	https://endler.dev
	OK	https://github.com/analysis-tools-dev/static-analysis/workflows/CI/badge.svg
	OK	https://github.com/dominikh/go-tools
	OK	https://github.com/exakat/php-static-analysis-tools
	OK	https://github.com/mcandre/linters
	OK	https://github.com/mre/awesome-dynamic-analysis
	OK	https://i.creativecommons.org/p/zero/1.0/88x31.png
	OK	https://www.peerlyst.com/posts/a-list-of-static-analysis-tools-for-c-c-peerlyst?utm_source=twitter&utm_medium=social&utm_content=peerlyst_post&utm_campaign=peerlyst_resources
	ERROR	awesome.png
		Stat data/render/src/templates/awesome.png: no such file or directory
	ERROR	{{ other.url | safe }}
		Stat data/render/src/templates/{{ other.url | safe }}: no such file or directory
	ERROR	{{linter.url | safe }}
		Stat data/render/src/templates/{{linter.url | safe }}: no such file or directory
CONTRIBUTING.md
	OK	https://github.com/mre/awesome-static-analysis/issues/223
README.md
	OK	awesome.png
	OK	http://checkerframework.org/
	OK	http://clang-analyzer.llvm.org/xcode.html
	OK	http://clang.llvm.org/extra/clang-tidy/
	OK	http://cs.sensiolabs.org/
	OK	http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis
	OK	http://errorprone.info/
	OK	http://frama-c.com/
	OK	http://golang.org/pkg/testing/
	OK	http://mangothecat.github.io/goodpractice/
	OK	http://oclint.org/
	OK	http://patterson-consulting.net/tds
	OK	http://spinroot.com/cobra/
	OK	http://standardjs.com/
	OK	http://stylelint.io/
	OK	http://tools.android.com/tips/lint
	OK	http://wala.sourceforge.net/wiki/index.php/Main_Page
	OK	http://wapmorgan.github.io/PhpCodeFixer/
	OK	http://www.adacore.com/codepeer
	OK	http://www.cprover.org/cbmc/
	OK	http://www.cprover.org/jbmc/
	OK	http://www.designite-tools.com
	OK	http://www.designite-tools.com/designitejava
	OK	http://www.dwheeler.com/flawfinder/
	OK	http://www.foodcritic.io/
	OK	http://www.freepik.com
	OK	http://www.html-tidy.org/
	OK	http://www.klocwork.com/products-services/klocwork
	OK	http://www.mono-project.com/docs/tools+libraries/tools/gendarme/
	OK	http://www.ndepend.com/
	OK	http://www.nongnu.org/chktex/
	OK	http://www.phpmetrics.org/
	OK	http://www.scalastyle.org
	OK	http://www.sonarqube.org/
	OK	http://www.spark-2014.org/about
	OK	http://www.spinellis.gr/sw/ckjm/
	OK	http://www.teamscale.com/
	OK	http://www.veracode.com/products/static-analysis-sast/static-code-analysis
	OK	https://LGTM.com
	OK	https://afterthedeadline.com/
	OK	https://anchore.io/
	OK	https://appscreener.us
	OK	https://atom.io/packages/atom-beautify
	OK	https://bitbucket.org/verateam/vera/wiki/Introduction
	OK	https://carc.codeplex.com/
	OK	https://catless.ncl.ac.uk/Programs/Frink/
	OK	https://clang-analyzer.llvm.org/scan-build.html
	OK	https://coala.io/
	OK	https://coala.io/languages
	OK	https://codeclimate.com/
	OK	https://codefactor.io
	OK	https://creativecommons.org/publicdomain/zero/1.0/
	OK	https://crystal-lang.org/
	OK	https://cyber-security.claranet.fr/en/codepatrol
	OK	https://de.mathworks.com/help/matlab/ref/mlint.html
	OK	https://deepscan.io
	OK	https://deepsource.io/
	OK	https://developer.android.com/studio
	OK	https://developer.apple.com/xcode/
	OK	https://docs.chef.io/cookstyle.html
	OK	https://dotnet-security-guard.github.io/
	OK	https://embold.io
	OK	https://empear.com/
	OK	https://en.wikipedia.org/wiki/Static_program_analysis
	OK	https://endler.dev
	OK	https://find-sec-bugs.github.io/
	OK	https://flow.org/
	OK	https://getpsalm.org/
	OK	https://github.com/360EntSecGroup-Skylar/goreporter
	OK	https://github.com/ActiveState/tdk
	OK	https://github.com/ActiveState/tdk/blob/master/docs/3.0/TDK_3.0_Checker.txt
	OK	https://github.com/Alexia/php7mar
	OK	https://github.com/Andrewsville/PHP-Token-Reflection
	OK	https://github.com/AtomLinter/linter-rust
	OK	https://github.com/CSSLint/csslint
	OK	https://github.com/CodeNarc/CodeNarc
	OK	https://github.com/ContinuumIO/ciocheck
	OK	https://github.com/DavidAnson/markdownlint
	OK	https://github.com/Debian/lintian
	OK	https://github.com/DotNetAnalyzers
	OK	https://github.com/DustinCampbell/CSharpEssentials
	OK	https://github.com/EdgedesignCZ/phpqa
	OK	https://github.com/Ericsson/codechecker
	OK	https://github.com/FriendsOfPHP/PHP-CS-Fixer
	OK	https://github.com/GeoffreyHecht/paprika
	OK	https://github.com/Glavin001/tslint-clean-code
	OK	https://github.com/GoASTScanner/gas
	OK	https://github.com/HairyFotr/linter
	OK	https://github.com/Halleck45/DesignPatternDetector
	OK	https://github.com/HaxeCheckstyle/haxe-checkstyle
	OK	https://github.com/INRIA/spoon
	OK	https://github.com/Instagram/MonkeyType
	OK	https://github.com/JosefPihrt/Roslynator/
	OK	https://github.com/JossWhittle/FlintPlusPlus
	OK	https://github.com/JusticeRage/Manalyze
	OK	https://github.com/Kha/electrolysis
	OK	https://github.com/Kuniwak/vint
	OK	https://github.com/MangoTheCat/cyclocomp
	OK	https://github.com/Manishearth/rust-clippy
	OK	https://github.com/MetricsGrimoire/CMetrics
	OK	https://github.com/Microsoft/DevSkim
	OK	https://github.com/Microsoft/binskim
	OK	https://github.com/Microsoft/pyright
	OK	https://github.com/Microsoft/tslint-microsoft-contrib
	OK	https://github.com/Polymer/polymer-analyzer
	OK	https://github.com/PositiveTechnologies/PT.PM
	OK	https://github.com/PyCQA/bandit
	OK	https://github.com/PyCQA/flake8
	OK	https://github.com/PyCQA/mccabe
	OK	https://github.com/PyCQA/prospector
	OK	https://github.com/PyCQA/pycodestyle
	OK	https://github.com/PyCQA/pydocstyle
	OK	https://github.com/PyCQA/pylint
	OK	https://github.com/Qafoo/QualityAnalyzer
	OK	https://github.com/QafooLabs/php-refactoring-browser
	OK	https://github.com/Quasilyte/go-consistent
	OK	https://github.com/RetireJS/retire.js
	OK	https://github.com/RustSec/advisory-db/
	OK	https://github.com/RustSec/cargo-audit
	OK	https://github.com/SVF-tools/SVF
	OK	https://github.com/StanfordPL/stoke
	OK	https://github.com/Symplify/EasyCodingStandard
	OK	https://github.com/Tencent/TscanCode
	OK	https://github.com/Trismegiste/Mondrian
	OK	https://github.com/ValeLint/vale
	OK	https://github.com/Vannevelj/VSDiagnostics
	OK	https://github.com/Wintellect/Wintellect.Analyzers
	OK	https://github.com/Yelp/undebt
	OK	https://github.com/YorickPeterse/ruby-lint
	OK	https://github.com/adamchainz/multilint
	OK	https://github.com/adrienverge/yamllint
	OK	https://github.com/ajinabraham/NodeJsScan
	OK	https://github.com/alecthomas/gometalinter
	OK	https://github.com/alexkohler/dogsled
	OK	https://github.com/alexkohler/nakedret
	OK	https://github.com/alexkohler/nargs
	OK	https://github.com/alexkohler/prealloc
	OK	https://github.com/alexkohler/unimport
	OK	https://github.com/amaembo/huntbugs
	OK	https://github.com/ambv/black
	OK	https://github.com/amperser/proselint/
	OK	https://github.com/analysis-tools-dev/static-analysis/workflows/CI/badge.svg
	OK	https://github.com/apiology/quality
	OK	https://github.com/arturbosch/detekt
	OK	https://github.com/ashleyglee/TSqlRules
	OK	https://github.com/asm89/twig-lint
	OK	https://github.com/awslabs/cfn-python-lint
	OK	https://github.com/banyanops/collector
	OK	https://github.com/blazeeboy/rubrowser
	OK	https://github.com/bombsimon/wsl
	OK	https://github.com/bridgecrewio/checkov/
	OK	https://github.com/brigade/haml-lint
	OK	https://github.com/brigade/scss-lint
	OK	https://github.com/btford/write-good
	OK	https://github.com/calmh/yardstick
	OK	https://github.com/carlosas/phpat
	OK	https://github.com/cesar-rodriguez/terrascan
	OK	https://github.com/checkstyle/checkstyle
	OK	https://github.com/classgraph/classgraph
	OK	https://github.com/client9/misspell
	OK	https://github.com/clutchski/coffeelint
	OK	https://github.com/code-cracker/code-cracker
	OK	https://github.com/codecombat/aether
	OK	https://github.com/codegram/pelusa
	OK	https://github.com/codespell-project/codespell
	OK	https://github.com/coreos/clair
	OK	https://github.com/csscomb/csscomb.js
	OK	https://github.com/cssstats/cssstats
	OK	https://github.com/cuplv/hopper
	OK	https://github.com/danmar/cppcheck
	OK	https://github.com/davidhalter/jedi
	OK	https://github.com/designsecurity/progpilot
	OK	https://github.com/dlang-community/D-Scanner
	OK	https://github.com/dlint-py/dlint
	OK	https://github.com/dominikh/go-tools
	OK	https://github.com/dominikh/go-tools/tree/master/unused
	OK	https://github.com/dotnet/roslyn-analyzers
	OK	https://github.com/douglascrockford/JSLint
	OK	https://github.com/dpnishant/jsprime
	OK	https://github.com/dspinellis/cqmetrics
	OK	https://github.com/duaraghav8/Solium
	OK	https://github.com/dunglas/phpdoc-to-typehint
	OK	https://github.com/eliasgranderubio/dagda
	OK	https://github.com/es-analysis/plato
	OK	https://github.com/eslint/eslint
	OK	https://github.com/etsy/phan
	OK	https://github.com/exakat/exakat
	OK	https://github.com/exakat/php-static-analysis-tools
	OK	https://github.com/facebook/infer
	OK	https://github.com/facebook/pfff
	OK	https://github.com/facebook/pyre-check
	OK	https://github.com/facebookexperimental/MIRAI
	OK	https://github.com/feddischson/include_gardener
	OK	https://github.com/fimbullinter/wotan
	OK	https://github.com/fkie-cad/cwe_checker
	OK	https://github.com/fsprojects/FSharpLint
	OK	https://github.com/fzipp/gocyclo
	OK	https://github.com/garethr/docker-label-inspector
	OK	https://github.com/go-critic/go-critic
	OK	https://github.com/golang/lint
	OK	https://github.com/golangci/golangci-lint
	OK	https://github.com/google/closure-compiler
	OK	https://github.com/google/closure-linter
	OK	https://github.com/google/error-prone
	OK	https://github.com/google/google-java-format
	OK	https://github.com/google/pytype
	OK	https://github.com/google/shipshape
	OK	https://github.com/google/styleguide/tree/gh-pages/cpplint
	OK	https://github.com/gordonklaus/ineffassign
	OK	https://github.com/groupon/codeburner
	OK	https://github.com/haya14busa/reviewdog
	OK	https://github.com/hchasestevens/bellybutton
	OK	https://github.com/inaka/elvis
	OK	https://github.com/insidersec/insider
	OK	https://github.com/ircmaxell/Tuli
	OK	https://github.com/jakzal/phpqa
	OK	https://github.com/jameysharp/corrode
	OK	https://github.com/jared-stilwell/complexity-report
	OK	https://github.com/jared-stilwell/escomplex
	OK	https://github.com/jarulraj/sqlcheck-old
	OK	https://github.com/jden/quality
	OK	https://github.com/jendrikseipp/vulture
	OK	https://github.com/jgautheron/goconst
	OK	https://github.com/jimhester/lintr
	OK	https://github.com/jkinder/jakstab
	OK	https://github.com/jmolivas/phpqa
	OK	https://github.com/jquery/esprima
	OK	https://github.com/jshint/jshint
	OK	https://github.com/justinabrahms/imhotep
	OK	https://github.com/jwilk/mwic
	OK	https://github.com/kalessil/phpinspectionsea
	OK	https://github.com/katiefenn/parker
	OK	https://github.com/killercup/rustfix
	OK	https://github.com/kisielk/errcheck
	OK	https://github.com/koalaman/shellcheck
	OK	https://github.com/lafolle/flen
	OK	https://github.com/languagetool-org/languagetool
	OK	https://github.com/larshp/abapOpenChecks
	OK	https://github.com/larshp/abaplint
	OK	https://github.com/leighmcculloch/gochecknoglobals
	OK	https://github.com/lequal/i-CodeCNES
	OK	https://github.com/linkedin/qark
	OK	https://github.com/linuxerwang/goroutine-inspect
	OK	https://github.com/lukasmartinelli/hadolint
	OK	https://github.com/lyft/linty_fresh
	OK	https://github.com/makaroni4/sandi_meter
	OK	https://github.com/mamuz/PhpDependencyAnalysis
	OK	https://github.com/mauricioaniche/ck
	OK	https://github.com/mcandre/linters
	OK	https://github.com/mcarton/rust-herbie-lint
	OK	https://github.com/mdempsky/maligned
	OK	https://github.com/mdempsky/unconvert
	OK	https://github.com/mebigfatguy/fb-contrib
	OK	https://github.com/mgechev/codelyzer
	OK	https://github.com/mgechev/revive
	OK	https://github.com/mibk/dupl
	OK	https://github.com/michaeledgar/laser
	OK	https://github.com/microsoft/ApplicationInspector
	OK	https://github.com/microsoft/devskim
	OK	https://github.com/mihaeu/dephpend
	OK	https://github.com/mivok/markdownlint
	OK	https://github.com/mpeterv/luacheck
	OK	https://github.com/mre/awesome-dynamic-analysis
	OK	https://github.com/mre/cargo-inspect
	OK	https://github.com/mrtazz/checkmake
	OK	https://github.com/mschwager/cohesion
	OK	https://github.com/multilang-depends/depends
	OK	https://github.com/mvdan/interfacer
	OK	https://github.com/mvdan/unparam
	OK	https://github.com/nasa-sw-vnv/ikos
	OK	https://github.com/nccgroup/sobelow
	OK	https://github.com/ndmitchell/hlint
	OK	https://github.com/ndmitchell/weeder
	OK	https://github.com/nicklockwood/SwiftFormat
	OK	https://github.com/nickng/dingo-hunter
	OK	https://github.com/nikic/PHP-Parser
	OK	https://github.com/oclint/oclint
	OK	https://github.com/okeuday/pest
	OK	https://github.com/ovr/phpsa
	OK	https://github.com/passy/android-lint-summary
	OK	https://github.com/philipwalton/html-inspector
	OK	https://github.com/php-parallel-lint/PHP-Parallel-Lint
	OK	https://github.com/phpro/grumphp
	OK	https://github.com/phpstan/phpstan
	OK	https://github.com/pocketjoso/specificity-graph
	OK	https://github.com/policeman-tools/forbidden-apis
	OK	https://github.com/povils/phpmnd
	OK	https://github.com/pre-commit/pre-commit
	OK	https://github.com/presidentbeef/brakeman
	OK	https://github.com/prettier/prettier
	OK	https://github.com/projectwallace/css-analyzer
	OK	https://github.com/prontolabs/pronto
	OK	https://github.com/psecio/parse
	OK	https://github.com/puffnfresh/wartremover
	OK	https://github.com/pumasecurity/puma-scan
	OK	https://github.com/purcell/sqlint
	OK	https://github.com/pyflakes/pyflakes/
	OK	https://github.com/python-security/pyt
	OK	https://github.com/python/mypy
	OK	https://github.com/ravenexp/splint
	OK	https://github.com/realm/SwiftLint
	OK	https://github.com/regebro/pyroma
	OK	https://github.com/remarkjs/remark-lint
	OK	https://github.com/rodjek/puppet-lint
	OK	https://github.com/rpm-software-management/rpmlint
	OK	https://github.com/rrrene/credo
	OK	https://github.com/rskuipers/php-assumptions
	OK	https://github.com/rubik/radon
	OK	https://github.com/rubik/xenon
	OK	https://github.com/rubocop-hq/rubocop
	OK	https://github.com/rust-lang-nursery/rls
	OK	https://github.com/rustwasm/twiggy
	OK	https://github.com/rwjblue/ember-template-lint
	OK	https://github.com/sasstools/sass-lint
	OK	https://github.com/sds/slim-lint
	OK	https://github.com/seattlerb/flay
	OK	https://github.com/seattlerb/flog
	OK	https://github.com/sebastianbergmann/phpcpd
	OK	https://github.com/sebastianbergmann/phpdcd
	OK	https://github.com/secure-software-engineering/phasar
	OK	https://github.com/secure-software-engineering/soot-infoflow-android
	OK	https://github.com/sensiolabs-de/deprecation-detector
	OK	https://github.com/sensiolabs-de/deptrac
	OK	https://github.com/shyiko/ktlint
	OK	https://github.com/sideci/goodcheck
	OK	https://github.com/sksamuel/scapegoat
	OK	https://github.com/sleekbyte/tailor
	OK	https://github.com/sorbet/sorbet
	OK	https://github.com/soutaro/querly
	OK	https://github.com/square/cane
	OK	https://github.com/squizlabs/PHP_CodeSniffer
	OK	https://github.com/sstalle/php7cc
	OK	https://github.com/stelligent/cfn_nag
	OK	https://github.com/stripe/safesql
	OK	https://github.com/ternjs/tern
	OK	https://github.com/thesp0nge/dawnscanner
	OK	https://github.com/timakin/bodyclose
	OK	https://github.com/tomasbjerre/violations-lib
	OK	https://github.com/tomzx/php-semver-checker
	OK	https://github.com/tonybaloney/wily
	OK	https://github.com/trailofbits/slither
	OK	https://github.com/troessner/reek
	OK	https://github.com/tsenart/deadcode
	OK	https://github.com/tsqllint/tsqllint
	OK	https://github.com/typescript-eslint/typescript-eslint
	OK	https://github.com/typetools/checker-framework/
	OK	https://github.com/uber/NullAway
	OK	https://github.com/uber/py-find-injection
	OK	https://github.com/uni-bremen-agst/libvcs4j
	OK	https://github.com/veelenga/ameba
	OK	https://github.com/viva64/pvs-studio-check-list
	OK	https://github.com/vlajos/misspell-fixer
	OK	https://github.com/vsiakka/gherkin-lint
	OK	https://github.com/w0rp/ale
	OK	https://github.com/walle/lll
	OK	https://github.com/wapmorgan/PhpCodeAnalyzer
	OK	https://github.com/wata727/tflint
	OK	https://github.com/wemake-services/dotenv-linter
	OK	https://github.com/wemake-services/wemake-python-styleguide
	OK	https://github.com/whitesmith/rubycritic
	OK	https://github.com/willkg/dennis/
	OK	https://github.com/willthames/ansible-lint
	OK	https://github.com/wireghoul/graudit
	OK	https://github.com/xcatliu/cqc
	OK	https://github.com/xojs/xo
	OK	https://github.com/yandex/gixy
	OK	https://github.com/yaniswang/HTMLHint
	OK	https://github.com/yoheimuta/protolint
	OK	https://github.com/zegl/kube-score
	OK	https://gitlab.com/opennota/check
	OK	https://godoc.org/github.com/surullabs/lint/gosimple
	OK	https://godoc.org/golang.org/x/tools/cmd/goimports
	OK	https://golang.org/cmd/gofmt/
	OK	https://golang.org/cmd/vet/
	OK	https://golang.org/cmd/vet/#hdr-Shadowed_variables
	OK	https://golang.org/pkg/go/ast/
	OK	https://golang.org/x/tools/cmd/gotype
	OK	https://graphmycss.com
	OK	https://houndci.com/
	OK	https://i.creativecommons.org/p/zero/1.0/88x31.png
	OK	https://insight.sensiolabs.com/
	OK	https://jsmonk.github.io/hegel
	OK	https://landscape.io/
	OK	https://lgtm.com/
	OK	https://marketplace.visualstudio.com/items?itemName=SharpDevelopTeam.RefactoringEssentialsforVisualStudio
	OK	https://metacpan.org/pod/Perl::Critic
	OK	https://nitpick-ci.com
	OK	https://npo-echelon.ru/en/solutions/appchecker.php
	OK	https://owasp.org/www-project-dependency-check/
	OK	https://pdepend.org/
	OK	https://peganza.com/products_pal.html
	OK	https://peganza.com/products_pex.html
	OK	https://phpmd.org/
	OK	https://pmd.github.io/
	OK	https://railroader.org/
	OK	https://sable.github.io/soot/
	OK	https://scitools.com/ada-programming-essential/
	OK	https://scrutinizer-ci.com/
	OK	https://security-code-scan.github.io/
	OK	https://securityonline.info/owasp-wap-web-application-protection-project/
	OK	https://semmle.com/
	OK	https://sider.review
	OK	https://smartdecscanner.com/
	OK	https://snyk.io/
	OK	https://software.microfocus.com/en-us/products/static-code-analysis-sast/overview
	OK	https://softwaresecured.com/reshift/
	OK	https://sonarcloud.io
	OK	https://sourceforge.net/projects/nagelfar/
	OK	https://spotbugs.github.io/
	OK	https://staticcheck.io/
	OK	https://stil4m.github.io/elm-analyse/
	OK	https://styler.r-lib.org/
	OK	https://submain.com/products/codeit.right.aspx
	OK	https://terraform-compliance.com
	OK	https://unibeautify.com/
	OK	https://vs.sonarlint.org/
	OK	https://www.absint.com/astree/index.htm
	OK	https://www.archunit.org/
	OK	https://www.attackflow.com/Extension
	OK	https://www.axivion.com/en/products-services-9#products_bauhaussuite
	OK	https://www.castsoftware.com/products/highlight
	OK	https://www.checkmarx.com/products/static-application-security-testing/
	OK	https://www.codacy.com/
	OK	https://www.code-inspector.com
	OK	https://www.codeac.io?ref=awesome-static-analysis
	OK	https://www.cppdepend.com
	OK	https://www.ctan.org/pkg/lacheck
	OK	https://www.deepcode.ai/
	OK	https://www.devexpress.com/products/coderush/
	OK	https://www.eclipse.org/cognicrypt/
	OK	https://www.freebsd.org/cgi/man.cgi?query=portlint&sektion=1&manpath=FreeBSD+8.1-RELEASE+and+Ports
	OK	https://www.getcodeflow.com
	OK	https://www.gnu.org/software/gawk/manual/html_node/Options.html
	OK	https://www.grammatech.com/products/codesonar
	OK	https://www.hcltechsw.com/wps/portal/products/appscan/home
	OK	https://www.jarchitect.com
	OK	https://www.jetbrains.com/idea/
	OK	https://www.jetbrains.com/resharper/
	OK	https://www.jetbrains.com/upsource/
	OK	https://www.kiuwan.com/
	OK	https://www.kiuwan.com/code-security-sast/
	OK	https://www.mathworks.com/products/polyspace-ada.html
	OK	https://www.mathworks.com/products/polyspace-bug-finder.html
	OK	https://www.mathworks.com/products/polyspace-code-prover.html
	OK	https://www.peerlyst.com/posts/a-list-of-static-analysis-tools-for-c-c-peerlyst?utm_source=twitter&utm_medium=social&utm_content=peerlyst_post&utm_campaign=peerlyst_resources
	OK	https://www.perforce.com/products/helix-qac
	OK	https://www.phpdoc.org/
	OK	https://www.projectwallace.com
	OK	https://www.ptsecurity.com/ww-en/products/ai/
	OK	https://www.pullrequest.com
	OK	https://www.qualys.com/apps/container-security/
	OK	https://www.quantifiedcode.com/
	OK	https://www.qulice.com/
	OK	https://www.ripstech.com/
	OK	https://www.sourcemeter.com/resources/rpg/
	OK	https://www.spinellis.gr/cscout/
	OK	https://www.synopsys.com/software-integrity/security-testing/static-analysis-sast.html
	OK	https://www.tmssoftware.com/site/fixinsight.asp
	OK	https://www.viva64.com/en/b/0614/
	OK	https://www.viva64.com/en/pvs-studio/
	OK	https://www.whitehatsec.com/products/static-application-security-testing/
	OK	https://xanitizer.com/
	ERROR	https://ldra.com/
		Forbidden (HTTP error 403)

Add flen

Right now i hove no time to add it.
But i put it here that we don`t forget it: https://github.com/lafolle/flen

Coccinelle

http://coccinelle.lip6.fr/

Adding detekt-hint as an awesome tool (https://github.com/Mkohm/detekt-hint)

Hi again @mre :)

I am currently developing a new tool for detection of design principle violations in Kotlin. https://github.com/Mkohm/detekt-hint

It is not awesome just yet, but i would like to know what are the requirements for being so? Does it need a certain amount users?

If it could be included in this list, it would most likely get more traffic and be awesome faster 😬 But i am aware that you probably don't want unfinished products in the list.

CodePeer wrongly listed as proprietary software

Hi,

As one of the developers of CodePeer at AdaCore, I'd like to point out that it is in fact distributed to our customers with GPLv3 license (AdaCore is a FLOSS tool provider), but that there is no "free" (as in free beer) version available on the Web.

It is also not the only available static anlyzer for Ada, you could list also:

PolySpace Ada (https://www.mathworks.com/products/polyspace-ada.html)
Understand for Ada (https://scitools.com/ada-programming-essential/)
Axivion Bauhaus Suite (https://www.axivion.com/en/products-services-9#products_bauhaussuite)

User reviews for these static analysis tools to complement this list

Thanks for this comprehensive list. You might also find user reviews for many of these solutions on IT Central Station to be helpful here.

As an example, users in our community looking for static analysis tools often read reviews for tools such as Veracode and Appscan. You can see a direct comparison between these two solutions here.

*Disclaimer: I work at IT Central Station.

analysis-tools-dev / static-analysis Goto Github PK

static-analysis's People

Contributors

Stargazers

Watchers

Forkers

static-analysis's Issues

Link Checker

Link Checker

PRs created for:

Not sure if awesome:

Link Checker

Recommend Projects

Recommend Topics

Recommend Org