Sign in with GitHub

TOPIC

#static-analysis

Open source repositories tagged with #static-analysis, ranked by health score.

checkstyle/checkstyle

Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.

Parser and static code analysis tool for PL/SQL and Oracle SQL.

Reverse engineer anything with agents, from app behavior down to native binaries.

duriantaco/skylos

Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/repo-map/

rubocop/rubocop-rspec

Code style checking for RSpec files.

PHP-CS-Fixer/PHP-CS-Fixer

A tool to automatically fix PHP Coding Standards issues

Static code analysis for Kotlin

zizmorcore/zizmor

Static analysis for GitHub Actions (and more)

carthage-software/mago

Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code.

bethington/ghidra-mcp

Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server integration, and Docker deployment.

A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead

glebm/i18n-tasks

Manage translation and localization with static analysis, for Ruby i18n

lakeday-org/perch

Semantic code linting with Decision Models

spotbugs/spotbugs

SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.

semgrep/semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

whitesmith/rubycritic

A Ruby code quality reporter

phpstan/phpstan

PHP Static Analysis Tool - discover bugs in your code without running it!

MarcelRoozekrans/roslyn-codelens-mcp

Roslyn-based MCP server giving AI agents deep semantic understanding of .NET/C# codebases — 67 tools for navigation, call graphs, diagnostics & code fixes, safe refactoring, code-quality auditing, test intelligence, DI graphs, and IL/external-assembly inspection.

A static code analysis tool for the Elixir language with a focus on code consistency and teaching.

realm/SwiftLint

A tool to enforce Swift style and conventions.