Rust parser combinator framework

An incremental parsing system for programming tools

lints and suggestions for the nix programming language

Unified developer tools for JavaScript, TypeScript, and the web

An extremely fast Python linter and code formatter, written in Rust.

⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.

Combination of multiple linters to run as a GitHub Action or standalone

SonarJS rules for ESLint

Continuous Inspection

Dockerfile linter, validate inline bash, written in Haskell

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

Python bindings for CodeQL CLI

CodeQL model generation for Go.

《深入理解CodeQL》Finding vulnerabilities with CodeQL.

⛏️ An extension for Visual Studio Code that simplifies CodeQL usage and executes code scanning automatically.

A variant analysis and visualisation tool that scans codebases for similar vulnerabilities

Collection of community-driven CodeQL query, library and extension packs

A fast, powerful type checker designed for Ruby

This repository contains CodeQL queries and libraries which support various Coding Standards.

An extension for Visual Studio Code that adds rich language support for CodeQL

Soufflé is a variant of Datalog for tool designers crafting analyses in Horn clauses. Soufflé synthesizes a native parallel C++ program from a logic specification.

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.