#css #code_analysis #code_review #devsecops #javascript #node #node_security #nodejs #sast #security #security_scanner #static_analysis

https://github.com/ajinabraham/nodejsscan

#python #c #go #java #javascript #sast #static_analysis #static_code_analysis

https://github.com/returntocorp/semgrep

#go #architecture #aws #aws_security #azure_security #cloud_security #cloudsecurity #devops #devsecops #gcp_security #iac #infrastructure #infrastructure_as_code #kubernetes #sast #scans #security #security_tools #security_violations #terraform #terrascan

https://github.com/accurics/terrascan

#go #code_quality #code_security #sast #static_analysis #tree_sitter

Globstar is a free, open-source tool that helps developers check their code for problems like security issues or bad coding practices. It uses a simple way to write these checks using tree-sitter queries, which are easy to learn and use. You can run Globstar in your automated testing pipelines without needing extra software installed. This makes it fast and easy to ensure your code follows your team's rules and standards. Plus, since it's open-source under the MIT license, you can use it freely in any project without worrying about legal restrictions.

https://github.com/DeepSourceCorp/globstar

#ocaml #c #go #java #javascript #python #r2c #ruby #sast #semgrep #static_analysis #static_code_analysis #typescript

Semgrep is a fast, open-source tool that scans your code to find bugs and security issues in over 30 programming languages. It works locally on your computer or in your build system, so your code stays private. Semgrep’s rules are easy to write and understand, helping you catch problems early in development, whether in your IDE, pre-commit checks, or CI/CD pipelines. For stronger security, the Semgrep AppSec Platform offers advanced analysis, AI-powered triage, and detailed fix guidance, reducing false alarms and helping developers fix issues quickly without slowing down. This improves code quality and security efficiently.

https://github.com/semgrep/semgrep

#python #ai #bug_detection #code_audit #code_quality #code_review #developer_tools #devsecops #google_gemini #llm #react #sast #security_scanner #supabase #typescript #vite #vulnerability_scanner #xai

**DeepAudit** is an AI-powered code audit tool using multi-agent collaboration to deeply scan projects for vulnerabilities like SQL injection, XSS, and path traversal. Import code from GitHub/GitLab or paste snippets; agents plan, analyze with RAG knowledge, and verify issues via secure Docker sandbox PoCs, generating PDF reports with fix suggestions. Deploy easily with one Docker command, supports local Ollama models for privacy, and cuts traditional tools' high false positives. **You benefit** by automating secure audits like a pro hacker—saving time, reducing errors, ensuring real exploits are caught, and speeding safe releases without manual hassle.

https://github.com/lintsinghua/DeepAudit