exakat/php-static-analysis-tools

A reviewed list of useful PHP static analysis tools

Exakat

The Exakat Engine is an automated code reviewing engine for PHP.

Moved to exakat-ce

This repository has been moved to a new home, see https://github.com/exakat/exakat-ce

php-static-analysis-tools's Issues

not find about string Parsed into PHP ,and load php code

Remove some duplicates

PHP Analysis is both in "Bugs finders" and "Misc"
PHP semver is twice in "Metrics"
RIPS is both in "Bugs finders" and "SaaS"

Add Psalm to the list

https://github.com/vimeo/psalm

Reviews for PHP static analysis tools

Great list. You might find user reviews for many of these tools on IT Central Station to be helpful.

Users interested in static analysis tools for PHP also read reviews for Veracode. You can see what the community has to say about this solution here.

misc/devbug 404

http://www.devbug.co.uk/ does not exist. (I don't know devbug for a PR.)

Add AppChecker to the list

Hello!

Echelon Team has developed AppChecker PHP static analyzer. AppChecker finds bugs, defects and vulnerabilities in source code.

Here are some examples of bugs detection:
magento/magento2#6320
magento/magento2#7776
magento/magento2#6715
zendframework/zf1#716
LiveHelperChat/livehelperchat#893
contao/core#8422
b2evolution/b2evolution#30
Dolibarr/dolibarr#5479
kajona/kajonacms#98
exponentcms/exponent-cms#66

Exakat is failing the install

Hi,

When trying to install Exakat I use the following procedure:

1. mkdir exakat
2. cd exakat
3. curl -o exakat.phar 'https://www.exakat.io/versions/index.php?file=latest'
4. php exakat.phar install

Warning: file_get_contents(https://www.exakat.io/versions/apache-tinkerpop-gremlin-server-3.4.12-bin.zip.sha256): failed to open stream: HTTP request failed! HTTP/1.0 404 Not Found in phar:///Volumes/dev/exakat/exakat.phar/library/Exakat/Tasks/Install.php on line 59

Which results in a failing install:

Fatal error: Uncaught TypeError: substr() expects parameter 1 to be string, bool given in phar:///Volumes/dev/exakat/exakat.phar/library/Exakat/Tasks/Install.php:59 Stack trace: #0 phar:///Volumes/dev/exakat/exakat.phar/library/Exakat/Tasks/Install.php(59): substr(false, 0, 64) #1 phar:///Volumes/dev/exakat/exakat.phar/library/Exakat/Exakat.php(196): Exakat\Tasks\Install->run() #2 phar:///Volumes/dev/exakat/exakat.phar/exakat(52): Exakat\Exakat->execute() #3 /Volumes/dev/exakat/exakat.phar(10): include('phar:///Volumes...') #4 {main} thrown in phar:///Volumes/dev/exakat/exakat.phar/library/Exakat/Tasks/Install.php on line 59