Here are 3,333 public repositories matching this topic...

WerWolv / ImHex

Sponsor

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

Updated Mar 17, 2026
C++

astral-sh / ruff

An extremely fast Python linter and code formatter, written in Rust.

python rust styleguide static-code-analysis style-guide linter static-analysis python3 pep8 ruff rustpython

Updated Mar 17, 2026
Rust

koalaman / shellcheck

ShellCheck, a static analysis tool for shell scripts

shell bash haskell linter static-analysis developer-tools

Updated Mar 12, 2026
Haskell

MobSF / Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

rest static-analysis apk owasp dynamic-analysis web-security malware-analysis mobsf android-security mobile-security windows-mobile-security ios-security api-testing cwe devsecops runtime-security mstg masvs mastg

Updated Mar 4, 2026
JavaScript

realm / SwiftLint

A tool to enforce Swift style and conventions.

swift linting linter static-analysis code-quality hacktoberfest

Updated Mar 13, 2026
Swift

nikic / PHP-Parser

A PHP parser written in PHP

php parser static-analysis ast

Updated Feb 26, 2026
PHP

facebook / infer

A static analyzer for Java, C, C++, and Objective-C

c java objective-c cpp static-code-analysis static-analysis code-quality

Updated Mar 16, 2026
OCaml

Konloch / bytecode-viewer

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

Updated Jan 7, 2026
Java

semgrep / semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

javascript ruby python c java go typescript static-code-analysis static-analysis sast r2c semgrep

Updated Mar 17, 2026
OCaml

analysis-tools-dev / static-analysis

Sponsor

⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.

analysis static-code-analysis linter static-analysis awesome-list code-quality static-analyzers hacktoberfest sast

Updated Mar 17, 2026
Rust

phpstan / phpstan

Sponsor

PHP Static Analysis Tool - discover bugs in your code without running it!

testing php php7 static-code-analysis static-analysis static-analyzer phpstan

Updated Mar 17, 2026
PHP

rshipp / awesome-malware-analysis

Sponsor

Defund the Police.

list awesome static-analysis chinese dynamic-analysis awesome-list malware-analysis chinese-translation malware-research threat-sharing threatintel malware-samples analysis-framework automated-analysis network-traffic threat-intelligence domain-analysis malware-collection drop-ice

Updated Jun 7, 2024

PHP-CS-Fixer / PHP-CS-Fixer

A tool to automatically fix PHP Coding Standards issues

php static-analysis code-style code-standards

Updated Mar 13, 2026
PHP

ttroy50 / cmake-examples

Useful CMake Examples

unit-testing cmake tutorial cpp catch boost static-analysis clang cpack cppcheck clang-format google-test ctest

Updated Feb 28, 2024
CMake

ast-grep / ast-grep

⚡A CLI tool for code structural search, lint and rewriting. Written in Rust

refactoring search rust tree-sitter babel typescript command-line linter static-analysis ast codemod command-line-tool grep codereview structural-search

Updated Mar 16, 2026
Rust

OWASP / mastg

Sponsor

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

android ios static-analysis reverse-engineering hacking mobile-app android-application ios-app dynamic-analysis pentesting mobile-security network-analysis mast reverse-enginnering runtime-analysis mstg testing-cryptography compliancy-checklist mastg

Updated Mar 16, 2026
Python

hadolint / hadolint

Sponsor

Dockerfile linter, validate inline bash, written in Haskell

docker dockerfile haskell linter static-analysis shellcheck dockerfile-linter

Updated Mar 9, 2026
Haskell

anchore / grype

A vulnerability scanner for container images and filesystems

go docker golang security tool containers static-analysis oci vulnerability vex vulnerabilities hacktoberfest container-image cyclonedx openvex

Updated Mar 17, 2026
Go

quay / clair

Vulnerability Static Analysis for Containers

go docker kubernetes containers static-analysis oci oci-image vulnerabilities clair

Updated Mar 16, 2026
Go

squizlabs / PHP_CodeSniffer

PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards.

cli php qa automation static-analysis coding-standards

Updated Apr 1, 2024
PHP