
semgrep
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
api-securityapi-security-testingcode-analysis+9
16.9k1 day ago

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

Tree-sitter based static vulnerability scanner with pattern matching and taint-flow analysis for multi-language source code. Outputs findings as…