Clang plugin with several static analysis checks

An ongoing & curated collection of awesome vulnerability scanning software, libraries and frameworks, best guidelines, technical resources and most important static application security testing (SAST)

List of guidelines and samples that is used at adesso Turkey when developing for the Android platform.

🖇 Android hodgepodge static code quality check tool gradle plugin.

ElasticSearch Correctness and perfOrmance Validator

🌐 Spring boot + PostgreSQL + Redis + Docker autodeploy backend template (Changellenge Qiwi hackathon winner)

This is my experiment to gain a better understanding of SonarQube as a code analyzer for PL/SQL and Oracle SQL code.

An opinionated ruleset for PHPStan to enforce Oneserv Coding Standards.

Provides static analysis for Shoot models and presenters

Sbt plugin for ScalaMetrics: A powerful static analysis library for Scala projects. It provides comprehensive analysis at multiple granularity levels: project, package, file, method, and member. It and generates a detailed single HTML report file with and raw JSON and CSV data files.

Perl-Critic Policies for simple Refactoring-Support

Experimental fork of the original Mypy plugin by Roberto Leinardi with various improvements. A plugin providing both real-time and on-demand scanning of Python files with Mypy from within PyCharm/IDEA.

Static code analysis tool based on the PhASAR framework

How to apply for CppDepend for Free?

SonarQube custom plugin development

Avoiding known Eigen3 pitfalls, automatically using clang-tidy