GitHub Trends
10.1K subscribers
15.3K links
See what the GitHub community is most excited about today.

A bot automatically fetches new repositories from https://github.com/trending and sends them to the channel.

Author and maintainer: https://github.com/katursis
Download Telegram
#go #code_quality #code_security #sast #static_analysis #tree_sitter

Globstar is a free, open-source tool that helps developers check their code for problems like security issues or bad coding practices. It uses a simple way to write these checks using tree-sitter queries, which are easy to learn and use. You can run Globstar in your automated testing pipelines without needing extra software installed. This makes it fast and easy to ensure your code follows your team's rules and standards. Plus, since it's open-source under the MIT license, you can use it freely in any project without worrying about legal restrictions.

https://github.com/DeepSourceCorp/globstar
#rust #code_quality #ide #language #language_server #lsp #python #rust #type_check #type_checker #typecheck #typechecker #types #typing

Pyrefly is a fast tool for checking Python code. It helps catch mistakes before you run your code, making it easier to write reliable programs. Pyrefly can work with both new and old Python projects, even if they don't have type information. It integrates well with editors like VSCode, providing features like auto-completion and code refactoring. This makes coding faster and more efficient, helping you avoid bugs and making your code easier to understand and maintain.

https://github.com/facebook/pyrefly
#python #ai #bug_detection #code_audit #code_quality #code_review #developer_tools #devsecops #google_gemini #llm #react #sast #security_scanner #supabase #typescript #vite #vulnerability_scanner #xai

**DeepAudit** is an AI-powered code audit tool using multi-agent collaboration to deeply scan projects for vulnerabilities like SQL injection, XSS, and path traversal. Import code from GitHub/GitLab or paste snippets; agents plan, analyze with RAG knowledge, and verify issues via secure Docker sandbox PoCs, generating PDF reports with fix suggestions. Deploy easily with one Docker command, supports local Ollama models for privacy, and cuts traditional tools' high false positives. **You benefit** by automating secure audits like a pro hacker—saving time, reducing errors, ensuring real exploits are caught, and speeding safe releases without manual hassle.

https://github.com/lintsinghua/DeepAudit