Static Code Analysis (SAST)

coatisoftware/sourcetrail

Sourcetrail - free and open-source interactive source explorer

tenable/terrascan

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

feeicn/cobra

Source Code Security Audit (源代码安全审计)

praetorian-inc/gokart

A static analysis tool for securing Go code

reverseclabs/needle

The iOS Security Testing Framework

novoda/gradle-static-analysis-plugin

Easy setup of static analysis tools for Android and Java projects.

skyscanner/lambdaguard

AWS Serverless Security

sonatype-nexus-community/devaudit

Open-source, cross-platform, multi-purpose security auditing tool

dpnishant/raptor

Web-based Source Code Vulnerability Scanner

owasp/riskassessmentframework

The Secure Coding Framework

mandiant/route-sixty-sink

Link sources to sinks in C# applications.

iqtlabs/auraborealisapp

Do You Know What's In Your Python Packages? A Tool for Visualizing Python Package Registry Security Audit Data