code-scanning

🚀 Useful README.md, LICENSE, CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, GitHub Issues, Pull Requests and Actions templates to jumpstart your projects.

github template readme issues documentation pr docs bug-tracker labels docs-generator issue code-of-conduct pull-requests documentation-generator code-scanning merge-request code-of-conduct-template github-actions pull-requests-template

UpdatedAug 10, 2024
Python

JetBrains /Qodana

Star392

📝 Source repository of Qodana Help

javascript kotlin python java php typescript static-code-analysis continuous-integration ci jetbrains static-analysis code-review code-quality code-scanning

UpdatedMar 14, 2025

JetBrains /qodana-action

Star272

⚙️ Scan your Go, Java, Kotlin, PHP, Python, JavaScript, TypeScript, .NET projects at GitHub with Qodana. This repository contains Qodana for Azure, GitHub, CircleCI and Gradle

javascript kotlin python java go php typescript static-code-analysis dotnet static-analysis actions code-review code-quality sarif devsecops code-scanning azure-pipelines github-actions azure-extensions qodana

UpdatedMar 17, 2025
JavaScript

owenrumney /squealer

Sponsor

Star231

Telling tales on you for leaking secrets!

go golang aws security static-analysis secrets git-tool hacktoberfest leak-detection security-tools devsecops code-scanning sarif-report leaking-secrets

UpdatedMar 19, 2025
Go

hudangwei /codemillx

Star204

codemillx is a tool for CodeQL, extract the comments in the code and generate codeql module. 强化Go开源项目安全检测(内含开源项目漏洞挖掘方法)

code-scanning codeql codeql-models

UpdatedMar 19, 2022
Go

JetBrains /qodana-cli

Star188

🔧 JetBrains Qodana’s official command line tool

javascript kotlin python java cli php typescript static-code-analysis ci code-review code-quality sarif devsecops code-scanning qodana sarif-report

UpdatedMar 18, 2025
Go

naivesystems /analyze

Star179

NaiveSystems Analyze is a static analysis tool for code security and compliance.

static-analysis cpp14 coding-standards cert cppcheck misra autosar code-scanning functional-safety iso26262 misra-c

UpdatedMar 17, 2025
C++

github /codeql-coding-standards

Star141

This repository contains CodeQL queries and libraries which support various Coding Standards.

cpp14 coding-standards cert misra autosar code-scanning functional-safety iso26262 codeql

UpdatedMar 18, 2025
CodeQL

GeekMasher /advanced-security-compliance

Star132

GitHub Advance Security Compliance Action

security security-automation devsecops code-scanning ghas

UpdatedDec 14, 2022
Python

advanced-security /advanced-security-material

Star70

security code-scanning codeql advanced-security advanced-security-training

UpdatedJan 28, 2025
Shell

shivasurya /code-pathfinder

Star55

Code Pathfinder, the open-source alternative to GitHub CodeQL built with GoLang. Built for advanced structural search, derive insights, find vulnerabilities in code.

search golang security tree-sitter application-security security-tools code-scanning sast structural-search codeql

UpdatedMar 18, 2025
Go

Codety Scanner is a comprehensive code scanner designed to detect code issues for 30+ programming languages and IaC frameworks. It embeds more than 6,000 code analysis rules and can detect code smells, vulnerable code, secrets in the code, performance issues, style violations, and more.

security code scanner security-scanner code-scanning code-scanner codety