Enforcing Coding Best Practices using CI

• dockerlint

  1 187 0.0 CoffeeScript

  Linting tool for Dockerfiles

  

dockerlint

• SonarQube

  65 8,573 9.9 Java

  Continuous Inspection

  

Sonarqube: Broad analysis tool

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• snyk

  62 4,065 9.9 TypeScript

  Discontinued Snyk CLI scans and monitors your projects for security vulnerabilities. [Moved to: https://github.com/snyk/cli]

  

Snyk for many languages

• detect-secrets

  20 3,461 8.1 Python

  An enterprise friendly way of detecting and preventing secrets in code.

  

Sometimes developers leak GitHub tokens and various secrets in codebases which should be avoided. We should prevent the leaking of secrets when committing code. We can integrate Yelp’s detect-secret in our workflow, which we can use to scan files for secrets and whitelist false positives to reduce the noise.

• semgrep

  74 9,724 9.9 OCaml

  Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

  

Semgrep tool: Used for go, java, python

• find-sec-bugs

  8 2,204 6.1 Java

  The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

  

SpotBugs with Find sec bugs for Java

• ESLint

  380 24,281 9.7 JavaScript

  Find and fix problems in your JavaScript code.

  

ESLint for Javascript

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

Suggest a related project