Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
-
Updated
Nov 10, 2026 - C
#
sast
Here are 1,988 public repositories matching this topic...
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
analysis static-code-analysis linter static-analysis awesome-list code-quality static-analyzers hacktoberfest sast
-
Updated
Nov 9, 2026 - Rust
DeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。让安全不再昂贵，让审计不再复杂。
react typescript ai developer-tools code-review code-quality security-scanner devsecops vulnerability-scanner sast xai code-audit vite bug-detection supabase llm google-gemini
-
Updated
Nov 1, 2026 - Python
Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.
kubernetes infrastructure aws security devops terraform architecture iac infrastructure-as-code scans aws-security security-tools cloudsecurity devsecops cloud-security sast azure-security gcp-security terrascan security-violations
-
Updated
Nov 20, 2025 - Go
Plugin for JADX to integrate MCP server
java mobile ai mcp reverse-engineering pentesting sast vapt llm model-context-protocol mcp-servers mcp-server model-context-protocol-servers
-
Updated
Oct 19, 2026 - Java
Find leaked secrets everywhere.
github git go golang security devops credentials static-analysis secret secrets developer-tools dynamic-analysis cicd security-tools devsecops sast secrets-management gitleaks secrets-detection secrets-scanning
-
Updated
Nov 9, 2026 - Go
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
security security-audit privacy static-code-analysis static-analysis owasp dataflow vulnerability code-quality compliance vulnerabilities appsec security-scanner gdpr security-automation security-tools devsecops sast devsecops-tools
-
Updated
Nov 9, 2026 - Go
A modular, stack-agnostic toolkit for AI coding agents to autonomously find, reproduce, and patch vulnerabilities.
security static-analysis code-review application-security threat-modeling vulnerability-detection multi-agent-systems adk devsecops ai-agents sast hardware-security gemini-api llm prompt-engineering gemini-cli antigravity adk-python application-security-tools antigravity-cli
-
Updated
Nov 10, 2026 - Python
nodejsscan is a static security code scanner for Node.js applications.
nodejs javascript lint security node static-analysis code-analysis code-review security-scanner devsecops sast node-security nodejsscan
-
Updated
Sep 21, 2026 - CSS
Complete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network Pentesting | SAST | DAST etc...
networking active-directory cybersecurity pentesting appsec wifi-security devsecops sast osint-resources sourcecode-analysis vapt mobile-penetration-testing api-pentesting
-
Updated
Oct 16, 2026 - TypeScript
《深入理解CodeQL》Finding vulnerabilities with CodeQL.
ql devsecops sast semmle-ql codeql codeql-queries 0e0w learning-codeql hackjava hackaspx javasec hackgolang
-
Updated
Nov 21, 2023
Security risk analysis for Kubernetes resources
-
Updated
Oct 8, 2026 - Go
Collection of agent skills to find vulnerabilities inside your web/mobile apps.
-
Updated
Oct 23, 2026
Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.
ruby kotlin python java cli golang security analysis ci terraform scanner static-analysis netcore vulnerabilities hacktoberfest sast security-flaws security-development zupit sast-analysis
-
Updated
Nov 6, 2026 - Go
Detect secrets. Validate them live. Map blast radius. Revoke fast. Run the CLI or embed in Rust, Python, or Node.js.
rust security credentials static-analysis secret secrets dynamic-analysis scanning husky security-scanner precommit security-tools devsecops sast secrets-management mise secret-scanning
-
Updated
Nov 9, 2026 - Rust
Open source AI code review for coding agents. A separate reviewer checks every change your agent writes before you push, in Claude Code, Codex, Cursor and Cline. No account or key of its own.
security linter static-analysis pre-commit code-review code-quality cursor codex cline security-tools ai-agents sast github-actions secret-scanning ai-code-review coding-agents agent-skills claude-code claude-code-plugin claude-skills
-
Updated
Nov 10, 2026 - TypeScript
AI-first security scanner. NEW in v2026.7: Claude Code compromise detection — vet .claude/ hooks, permissions & skills before you clone — plus an always-on AI attack-signature scanner and native Rust & PHP rules. Also: medusa scan --git to vet any repo, medusa secrets scan for leaked API keys. 40,000+ patterns, zero setup.
react python open-source security mcp scanner nextjs static-analysis code-analysis security-tools devsecops vulnerability-scanner sast ai-security llm-security cve-detection agent-security
-
Updated
Aug 10, 2026 - Python
APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their code.
security static-analysis owasp penetration-testing code-review infosec pentesting static-analyzer android-security pentest information-security secure-coding security-tools sast pentesting-tools owasp-mobile-top mstg masvs mobile-sec-android apkhunt
-
Updated
Sep 24, 2026 - Python
Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/repo-map/
javascript python java go dart php typescript static-analysis code-quality python-security devsecops ai-agents code-scanning sast github-actions dead-code prompt-injection ai-generated-code ai-code-review dead-code-detection
-
Updated
Nov 10, 2026 - Python
Add this topic to your repo
To associate your repository with the sast topic, visit your repo's landing page and select "manage topics."