
static-analysis
Curated directory of static analysis (SAST) tools and linters for programming languages, configs, build tools, and CI, focused on improving code…

Curated directory of static analysis (SAST) tools and linters for programming languages, configs, build tools, and CI, focused on improving code…

Python Command-Line Ghidra Decompiler

Processes SARIF output from static analysis tools to detect and redact hard-coded secrets in source code, creating a clean copy without the original…

Static PHP code scanner that detects SQL injection, XSS, SSRF, LFI, command injection, insecure deserialization, and other web vulnerabilities in…

The iOS Security Testing Framework

Automated static code analysis framework integrated with SonarQube for early vulnerability detection in source code by scanning Git repositories…

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.