Our great sponsors
-
Let me share a shameless plug (as an author of the pre-commit-terraform). I will show these hooks in action and answer questions during my live stream on Friday 29th of October - https://www.youtube.com/watch?v=ziJK79tI6tY
-
semgrep
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Nice roundup! I wanted to mention that Semgrep lets you write custom autofix rules, and can also be used as a pre-commit hook. Can be pretty handy if you have some coding patterns you want to enforce in your own repos.
-
SonarQube
Static code analysis for 29 languages.. Your projects are multi-language. So is SonarQube analysis. Find Bugs, Vulnerabilities, Security Hotspots, and Code Smells so you can release quality code every time. Get started analyzing your projects today for free.
Related posts
- One secret tip for first-time OSS contributors. Shh! 🤫 don't tell anyone else
- 25% of Python devs don’t know about json.load and json.dump (including devs at Microsoft, Sentry, Unicef, and more)
- What tools exists, or you recommend, for code review, quality and/or security review
- Hacktoberfest and open-source security
- Any Cool Codebase Indexing Libraries Out There?