anchore / grype
A vulnerability scanner for container images and filesystems
anchore / grype
quay / clair
Vulnerability Static Analysis for Containers
anchore / syft
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
reviewdog / reviewdog
🐶 Automated code review tool integrated with any code analysis tools regardless of programming language
securego / gosec
Go security checker
dominikh / go-tools
Staticcheck - The advanced Go linter
revive-lint / revive
🔥 Fast, strict, configurable, extensible, and beautiful linter for Go
nikolaydubina / go-recipes
🦩 Tools for Go projects
uber-go / nilaway
Static analysis tool to detect potential nil panics in Go code
stackrox / kube-linter
KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best practices.
Bearer / bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
betterleaks / betterleaks
Find leaked secrets everywhere.
controlplaneio / kubesec
Security risk analysis for Kubernetes resources
ZupIT / horusec
Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.
safedep / vet
Protect against malicious open source packages 🤖
ludo-technologies / pyscn
Code quality analysis for Python in the age of AI coding.
dkorunic / betteralign
Detect and fix suboptimal struct field layout in Go: reduces padding and GC pointer bytes, rewrites files while preserving comments. A drop-in fieldalignment replacement.
houqp / sqlvet
Go fearless SQL. Sqlvet performs static analysis on raw SQL queries in your Go code base.
azrtydxb / procoder
Senior-developer discipline for AI coding agents. A commit gate that counts unchecked as failing, quality controllers that refuse to call unfinished work done, and a lessons loop that closes each escaped bug's class. One Go binary, no runtime deps, works with 20+ agents.
typesafe-docs / iterleak
Go analyzer that reports iter.Pull and iter.Pull2 calls whose stop function can go uncalled and leak a goroutine.
mpyw / declscope
Keep Go packages flat without losing their internal boundaries: file-level private and package scopes for declarations, methods and struct fields
HexLasso / FF-16-TUI
Interactive static pattern discovery tool to locate structures from frequent patterns
arhuman / ansible-static-lint
Static Ansible linting in Go: the 38 ansible-lint rules decidable from YAML alone, byte-for-byte pep8 output, no Ansible runtime.