#go #helm_charts #kubernetes #static_analysis #yaml_files

https://github.com/stackrox/kube-linter

#java #agent #asm #bytecode #bytecode_engineering #bytecode_manipulation #decompile #decompiler #javafx #javafx_application #jvm_bytecode #reverse_engineering #static_analysis

https://github.com/Col-E/Recaf

#php #static_analysis #code_style #code_standards

https://github.com/FriendsOfPHP/PHP-CS-Fixer

#go #github #lint #cli #gitlab #static_code_analysis #ci #linter #static_analysis #bitbucket #code_review #code_quality #codereview

https://github.com/reviewdog/reviewdog

#go #golang #security #static_code_analysis #static_analysis #security_automation #security_tools

https://github.com/securego/gosec

#go #golang #security #security_tools #static_analysis #static_code_analysis

https://github.com/praetorian-inc/gokart

#php #laravel #phpstan #static_analysis #static_code_analysis

https://github.com/nunomaduro/larastan

#go #containers #cyclonedx #docker #golang #hacktoberfest #oci #sbom #spdx #static_analysis #tool

https://github.com/anchore/syft

#go #container_image #containers #cyclonedx #docker #golang #hacktoberfest #oci #security #static_analysis #tool #vulnerabilities #vulnerability

https://github.com/anchore/grype

#python #ethereum #solidity #static_analysis

https://github.com/crytic/slither

#rust #linter #pep8 #python #python3 #rustpython #static_analysis #static_code_analysis #style_guide #styleguide #stylelint

https://github.com/charliermarsh/ruff

#yara #all_in_one #antivirus #apk #elf #exe #linux #malware #malware_analysis #osx #packer #python3 #ransomware #security_tools #static_analysis #strings #suspicious_files #termux #threat_analysis #virustotal #windows

https://github.com/CYB3RMX/Qu1cksc0pe

#typescript #code_coverage #composer #continuous_integration #github_actions #hacktoberfest #php #php_extensions #static_analysis #tools

https://github.com/shivammathur/setup-php

#haskell #docker #dockerfile #dockerfile_linter #linter #shellcheck #static_analysis

https://github.com/hadolint/hadolint

#cplusplus #abstract_interpretation #program_analysis #software_verification #static_analysis

IKOS is a tool that helps find errors in C and C++ programs before they are run. It uses a technique called Abstract Interpretation to analyze the code and detect potential runtime errors, such as buffer overflows. This tool is especially useful because it can identify problems that might cause your program to crash or behave incorrectly, making your code more reliable and secure. To use IKOS, you simply run the `ikos` command with your source file, and it will report any errors it finds, helping you fix them before running the program. This saves time and ensures your software is safer and more stable.

https://github.com/NASA-SW-VnV/ikos

#go #container_image #containers #cyclonedx #docker #go #golang #hacktoberfest #oci #openvex #security #static_analysis #tool #vex #vulnerabilities #vulnerability

Grype is a tool that scans container images and filesystems for known vulnerabilities. It supports various package types, including those from major operating systems like Alpine, Debian, and Ubuntu, as well as language-specific packages like Ruby, Java, JavaScript, Python, and more. Here’s how it benefits you You can easily install Grype using a simple script or through package managers like Homebrew or Chocolatey.
- **Comprehensive Scanning** You can choose from different output formats such as table, JSON, CycloneDX, and SARIF, or even create custom templates.
- **Integration with Other Tools** Grype has active community meetings and support options, including commercial support through Anchore.
- **Automatic Database Updates**: Grype manages its vulnerability database automatically, ensuring you always have the latest vulnerability information.

Overall, Grype helps you identify and manage vulnerabilities in your container images and filesystems efficiently.

https://github.com/anchore/grype

#cplusplus #analyzer #binary_analysis #c_plus_plus #cpp #cybersecurity #dark_mode #dear_imgui #disassembler #forensics #hacking #hacktoberfest #hex_editor #ips #mathematical_evaluator #multi_platform #pattern_language #preprocessor #reverse_engineering #static_analysis #windows

ImHex is a powerful hex editor designed for reverse engineers, programmers, and anyone who needs to work with binary data. It offers many features that make it useful and user-friendly. Here are the key benefits ImHex allows you to edit bytes, manage patches, undo and redo changes infinitely, and copy bytes in various formats. It also supports colorful highlighting, data display in different types (like integers, floats, colors), and decoding data in various encodings.
- **Custom Pattern Language** It has dark and light modes to protect your eyes, especially during late-night work sessions.
- **Data Analysis and Visualization** It supports various search methods (string, sequence, regex) and numerous hashing algorithms.
- **Modern Interface** ImHex works on Windows, macOS, and Linux, with options for web and nightly pre-release versions.

Overall, ImHex provides a comprehensive set of tools to make working with binary data efficient and comfortable.

https://github.com/WerWolv/ImHex

#go #golang #security #security_automation #security_tools #static_analysis #static_code_analysis

Gosec is a tool that checks your Go code for security issues. It scans your code to find problems like hard-coded credentials, unsafe code practices, and other vulnerabilities. You can install it easily using commands or integrate it into your GitHub actions for automated checks. Gosec allows you to customize which rules to run, exclude certain files or folders, and generate reports in various formats. This helps you identify and fix security issues quickly, making your code more secure and reliable.

https://github.com/securego/gosec

#go #code_quality #code_security #sast #static_analysis #tree_sitter

Globstar is a free, open-source tool that helps developers check their code for problems like security issues or bad coding practices. It uses a simple way to write these checks using tree-sitter queries, which are easy to learn and use. You can run Globstar in your automated testing pipelines without needing extra software installed. This makes it fast and easy to ensure your code follows your team's rules and standards. Plus, since it's open-source under the MIT license, you can use it freely in any project without worrying about legal restrictions.

https://github.com/DeepSourceCorp/globstar

#go #containers #cyclonedx #docker #go #golang #hacktoberfest #oci #sbom #spdx #static_analysis #tool

Syft is a tool that helps create a list of all the software components used in your applications, known as a Software Bill of Materials (SBOM). This list is important for finding vulnerabilities and ensuring that your software complies with licensing rules. By using Syft, you can better manage your software's security and compliance. It works with many types of software and can be used with other tools like Grype to check for vulnerabilities. This helps keep your software safe and up-to-date.

https://github.com/anchore/syft