Top 9 code-scanning Open-Source Projects

secure-code-game

1 1,855 7.7 Python

A GitHub Security Lab initiative, providing an in-repo learning experience, where learners secure intentionally vulnerable code.

Project mention: The GitHub Community Roundup - 2024.01.16 | dev.to | 2024-02-15

Up your security skills with this in-repo learning experience. This season's game features five community-contributed challenges in JavaScript, Python, Go, and GitHub Actions. Start playing now.

laminas-code

2 1,818 6.9 PHP

Extensions to the PHP Reflection API, static code scanning, and code generation
InfluxDB

www.influxdata.com sponsored

Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
codeql-action

4 1,047 0.0 TypeScript

Actions for running CodeQL analysis
amazing-github-template

4 414 0.0 Python

🚀 Useful README.md, LICENSE, CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, GitHub Issues, Pull Requests and Actions templates to jumpstart your projects.
Qodana

3 390 9.4

📝 Source repository of Qodana Help

Project mention: Unstable activity happening with Qodana and .NET | /r/Jetbrains | 2023-12-05

It’s easy enough to migrate to the newer EAP version of the .NET linter which supports the latest version of .NET 8. You can view instructions on how to do this here.

qodana-action

2 244 9.1 JavaScript

⚙️ Scan your Go, Java, Kotlin, PHP, Python, JavaScript, TypeScript, .NET projects at GitHub with Qodana. This repository contains Qodana for Azure, GitHub, CircleCI and Gradle

Project mention: Develop, test, and deploy your extensions for all popular CIs from a single codebase | dev.to | 2023-06-18

This is a relatively short tutorial on how to develop, test, and deploy your CI extensions for GitHub Actions, Azure Pipelines, and CircleCI from a single monorepo and is based on the experience of creating the Qodana CI extensions.

squealer

4 152 5.3 Go

Telling tales on you for leaking secrets!
WorkOS

workos.com sponsored

The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
analyze

3 145 8.6

NaiveSystems Analyze is a static analysis tool for code security and compliance.

Project mention: NaiveSystems Analyze – FOSS static analyzer for MISRA C/C++, AUTOSAR C++14, etc. | news.ycombinator.com | 2023-12-17

How do you conclude that? The instructions here:
https://github.com/naivesystems/analyze/wiki/How-to-run-on-m...
say docker is required.

codeql-coding-standards

3 105 9.8 CodeQL

This repository contains CodeQL queries and libraries which support various Coding Standards.

Project mention: Misra C++:2023 Published | news.ycombinator.com | 2023-12-17

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).

code-scanning related posts

Misra C++:2023 Published
4 projects | news.ycombinator.com | 17 Dec 2023
Porsche Open Source Platform
1 project | news.ycombinator.com | 12 Nov 2023

Index

What are some of the best open-source code-scanning projects? This list will help you:

	Project	Stars
1	secure-code-game	1,855
2	laminas-code	1,818
3	codeql-action	1,047
4	amazing-github-template	414
5	Qodana	390
6	qodana-action	244
7	squealer	152
8	analyze	145
9	codeql-coding-standards	105