static-analysis

An extremely fast Python linter, written in Rust.

Find bugs in JavaScript programs.

OpenSCA-cli is a supply-chain security tool for security researchers and developers.

Static analysis for GitHub Actions.

Analyze Kubernetes YAML files and Helm charts, and check them against a variety of best practices, with a focus on production readiness and security.

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

A vulnerability scanner for container images and filesystems

A fast and polyglot tool for code searching, linting, rewriting at large scale.

Automatically extract obfuscated strings from malware.

ShellCheck, a static analysis tool for shell scripts

Dockerfile linter, validate inline bash, written in Haskell