static-analysis

Readers should also peruse the 'Multiple languages' section, many of the big names, Coverity, Klocwork et al. are listed there. see https://github.com/analysis-tools-dev/static-analysis#multip...

The link was supposed to go to the section C https://github.com/analysis-tools-dev/static-analysis#c

Maintainer of the list here. Thanks for mentioning it. I have not heard of Microsoft's analyze. Could you paste a link here? I will add it to the list, then. Alternatively you could send a pull request to the repository. ;) https://github.com/analysis-tools-dev/static-analysis

Same. Few years ago I started a little list of linters. Just kept adding tools and the list is huge now thanks to lots of contributors. https://github.com/analysis-tools-dev/static-analysis Still love adding new linters there when I cross their path. :)

Additional lists of static analysis, dynamic analysis, SAST, DAST, and other source code analysis tools: OWAP > Source Code Analysis Tools: https://owasp.org/www-community/Source_Code_Analysis_Tools https://analysis-tools.dev/ (supports upvotes and downvotes) analysis-tools-dev/static-analysis: https://github.com/analysis-tools-dev/static-analysis analysis-tools-dev/dynamic-analysis: https://github.com/analysis-tools-dev/dynamic-analysis devsecops/awesome-devsecops: https://github.com/devsecops/awesome-devsecops , https://github.com/TaptuIT/awesome-devsecops kai5263499/awesome-container-security: https://github.com/kai5263499/awesome-container-security https://en.wikipedia.org/wiki/DevOps#DevSecOps,_Shifting_Sec... : > DevSecOps is an augmentation of DevOps to allow for security practices to be integrated into the DevOps approach. The

Some other lists of these sort of things: https://github.com/analysis-tools-dev/static-analysis https://github.com/analysis-tools-dev/dynamic-analysis https://github.com/collab-qa/check-all-the-things/tree/maste... https://github.com/collab-qa/check-all-the-things/blob/maste...

The `formatter` tag is already part of the underlying data [1], it's just not reflected on the website yet. We plan to put formatters into a visually separate group per language and add a filter functionality for the type (formatter, linter, metalinter, web-service). [1]: https://github.com/analysis-tools-dev/static-analysis/blob/0...

Yes, that's the next feature we're working on. You'll be able to filter by license, maintenance level, and type (commandline, service,...). Jakub is currently restructuring the YAML source to allow for that (https://github.com/analysis-tools-dev/static-analysis/pull/4...). We wanted to launch early to gauge if we're heading in the right direction. Thanks for the feedback.

You can already create a pull request and then we'll merge it as soon as the acceptance criteria is met. In the meantime you'll get some exposure through the PR on https://github.com/analysis-tools-dev/static-analysis as well, which is where we get some traffic as well (~500 unique visitors per week).

Looks great! The threshold for addition to analysis-tools.dev is (an arbitrary) 20 stars. If you like, you can already create a pull request here: https://github.com/analysis-tools-dev/static-analysis/blob/m... Our list is open source, we just render a website version (also open source) from it for some more functionality.

Hey, this post got more attention than I thought. Happy to answer your questions and get some feedback on what to improve. Maybe people are interested in some tech: My colleague Jakub and me built this site with GatsbyJS and Cloudflare Edge Workers. The 99th percentile of response times from the workers is currently 9.7ms, which is impressive. The code is fully open source on Github [1]. It is based on submissions by 190 individual contributors so far [2] We went for an open model and completely depend on Github sponsors for the funding. We are not trying to rapidly grow here, rather build a steady business. You can read more about the buisness model in our first blog post [3]. If your company might be interested in sponsoring, let us know or check the offerings here: https://github.com/sponsors/analysis-tools-dev/ <3 [1]: https://githu

Interesting. Never heard of it, but I created a ticket on Github to investigate. You can watch it to track updates: https://github.com/analysis-tools-dev/static-analysis/issues... Thanks for the feedback!