47 Ruby Static Analysis Tools

A Ruby static code analyzer, based on the community Ruby style guide.

SonarQube is an open platform to manage code quality.

A static analysis security vulnerability scanner for Ruby on Rails applications.

Better Code Hub checks your GitHub codebase against 10 engineering guidelines devised by the authority in software quality, Software Improvement Group.

A fast, powerful type checker designed for Ruby.

CodeScene is a quality visualization tool for software. Prioritize technical debt, detect delivery risks, and measure organizational aspects. Fully automated.

In-depth static analysis to find issues in verticals of bug risks, security, anti-patterns, performance, documentation and style. Native integrations with GitHub, GitLab and Bitbucket. Less than 5% false positives.

Flay analyzes code for structural similarities.

Code Analysis to ship Better Code, Faster.

Flog reports the most tortured code in an easy to read pain report. The higher the score, the more pain the code is in.

Code smell detector for Ruby.

Beautify HTML, CSS, JavaScript, PHP, Python, Ruby, Java, C, C++, C#, Objective-C, CoffeeScript, TypeScript, Coldfusion, SQL, and more in Atom editor.

Code quality threshold checking as part of your build.

A static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.

A Ruby code quality reporter.

Comments on style violations in GitHub pull requests. Supports Coffeescript, Go, HAML, JavaScript, Ruby, SCSS and Swift.

Ruby classes interactive dependency graph generator.

Creates reports of over 400 rule patterns for feature detection (e.g. the use of cryptography or version control in apps).

Code quality and technical debt management platform that supports 10+ languages.

Automated code review tool integrates with GitHub, Bitbucket and GitLab (even self-hosted). Available for JavaScript, TypeScript, Python, Ruby, Go, PHP, Java, Docker, and more. (open-source free)

Automated Code Analysis for repos on GitHub or BitBucket.

Automated code analysis tool to deal with technical depth. Integrates with Bitbucket and Gitlab. (free for Open Source Projects)

Regex-based static analysis tool for Visual Studio, VS Code, and Sublime Text - C/C++, C#, PHP, ASP, Python, Ruby, Java, and others.

A commercial static analysis platform that supports the scanning of C/C++, C#, VB.NET, VB6, ABAP/BSP, ActionScript, Apex, ASP.NET, Classic ASP, VB Script, Cobol, ColdFusion, HTML, Java, JS, JSP, MXML/Flex, Objective-C, PHP, PL/SQL, T-SQL, Python (2.6, 2.7), Ruby (1.9.3), Swift, Scala, VB, and XML.

Grep rough audit - source code auditing tool.

Comment on commits coming into your repository and check for syntactic errors and general lint warnings.

A multi-language static analyzer for C/C++/Obj-C/Python/Ruby to create a graph (in dot or graphml format) which shows all `#include` relations of a given set of files.

Benchmark against thousands of projects, and analyse code for structural quality with focus on maintainability.

Static analysis Lint-type tool to improve your OO Ruby code.

Quick automated code review of your changes. Supports more than 40 runners for various languages, including Clang, Elixir, JavaScript, PHP, Ruby and more.

Runs quality checks on your code using community tools, and makes sure your numbers don't get any worse over time.

Pattern Based Checking Tool for Ruby.

An open source static analysis security vulnerability scanner for Ruby on Rails applications.

A proprietary code quality checker that can be integrated with GitHub.

Scan is a free open-source DevSecOps platform for detecting security issues in source code and dependencies. It supports a broad range of languages and CI/CD pipelines.

An automated code reviewing tool. Improving developers' productivity.

SAST tool which is capable of identifying vulnerabilities and undocumented features. The analyzer scans the source code and executables without debug info (i.e. binaries). Supports: Java/Scala/Kotlin, PHP, C#, JavaScript, TypeScript, VBScript, HTML5, Python, Perl, C/C++, Objective-C/Swift, PL/SQL, T-SQL, ABAP, 1C, Apex, Go, Ruby, Groovy, Delphi, VBA, Visual Basic 6, Solidity, Vyper, COBOL.

Vulnerability scanner for dependencies of node.js apps (free for Open Source Projects).

Multi-language cloud-based static code analysis. History, trends, security hot-spots, pull request analysis and more. Free for open source.

Ruby Style Guide, with linter & automatic code fixer

Static code analysis for binary and source code - Java/Scala, PHP, Javascript, C#, PL/SQL, Python, T-SQL, C/C++, ObjectiveC/Swift, Visual Basic 6.0, Ruby, Delphi, ABAP, HTML5 and Solidity.

Combination of multiple linters to install as a GitHub Action.

A commercial static analysis platform that allows for scanning of multiple languages (C/C++, Android, C#, Java, JS, PHP, Python, Node.JS, Ruby, Fortran, and Swift).

Commercial Static Code Analysis which doesn't require pre-compilation.