Analysis tools logo

47 Ruby Static Analysis Tools

Type:
Any

What is Ruby?

Ruby is an interpreted, high-level, general-purpose programming language. It was designed and developed in the mid-1990s by Yukihiro Matsumoto in Japan.

Ruby is dynamically typed and uses garbage collection. It supports multiple programming paradigms, including procedural, object-oriented, and functional programming. According to the creator, Ruby was influenced by Perl, Smalltalk, Eiffel, Ada, Basic, and Lisp.

(More info)

What are the best Ruby analysis tools?

41
37
14

brakeman

  • Type: cli
5899

A static analysis security vulnerability scanner for Ruby on Rails applications.

12

Better Code Hub

  • Type: service

Better Code Hub checks your GitHub codebase against 10 engineering guidelines devised by the authority in software quality, Software Improvement Group.

12

Sorbet

  • Type: cli
2425

A fast, powerful type checker designed for Ruby.

11

CodeScene

  • Type: service

CodeScene is a quality visualization tool for software. Prioritize technical debt, detect delivery risks, and measure organizational aspects. Fully automated.

8

DeepSource

  • Type: service

In-depth static analysis to find issues in verticals of bug risks, security, anti-patterns, performance, documentation and style. Native integrations with GitHub, GitLab and Bitbucket. Less than 5% false positives.

5

flay

  • Type: cli
606

Flay analyzes code for structural similarities.

4

flog

  • Type: cli
715

Flog reports the most tortured code in an easy to read pain report. The higher the score, the more pain the code is in.

4

reek

  • Type: cli
3407

Code smell detector for Ruby.

2

Atom-Beautify

  • Type: ide-plugin
1462

Beautify HTML, CSS, JavaScript, PHP, Python, Ruby, Java, C, C++, C#, Objective-C, CoffeeScript, TypeScript, Coldfusion, SQL, and more in Atom editor.

2

cane

  • Type: cli
1328

Code quality threshold checking as part of your build.

2

dawnscanner

  • Type: cli
635

A static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.

2

rubycritic

  • Type: cli
2633

A Ruby code quality reporter.

1

Hound CI

  • Type: cli
1848

Comments on style violations in GitHub pull requests. Supports Coffeescript, Go, HAML, JavaScript, Ruby, SCSS and Swift.

1

Rubrowser

  • Type: cli
512

Ruby classes interactive dependency graph generator.

0

ApplicationInspector

  • Type: cli
3699

Creates reports of over 400 rule patterns for feature detection (e.g. the use of cryptography or version control in apps).

0

Code Inspector

  • Type: service

Code quality and technical debt management platform that supports 10+ languages.

0

Codeac

  • Type: service

Automated code review tool integrates with GitHub, Bitbucket and GitLab (even self-hosted). Available for JavaScript, TypeScript, Python, Ruby, Go, PHP, Java, Docker, and more. (open-source free)

0

CodeFlow

  • Type: service

Automated code analysis tool to deal with technical depth. Integrates with Bitbucket and Gitlab. (free for Open Source Projects)

0

DevSkim

  • Type: ide-plugin
490

Regex-based static analysis tool for Visual Studio, VS Code, and Sublime Text - C/C++, C#, PHP, ASP, Python, Ruby, Java, and others.

0

Fortify

  • Type: ide-plugin

A commercial static analysis platform that supports the scanning of C/C++, C#, VB.NET, VB6, ABAP/BSP, ActionScript, Apex, ASP.NET, Classic ASP, VB Script, Cobol, ColdFusion, HTML, Java, JS, JSP, MXML/Flex, Objective-C, PHP, PL/SQL, T-SQL, Python (2.6, 2.7), Ruby (1.9.3), Swift, Scala, VB, and XML.

0

graudit

  • Type: cli
669

Grep rough audit - source code auditing tool.

0

imhotep

  • Type: cli
213

Comment on commits coming into your repository and check for syntactic errors and general lint warnings.

0

include-gardener

  • Type: cli
51

A multi-language static analyzer for C/C++/Obj-C/Python/Ruby to create a graph (in dot or graphml format) which shows all `#include` relations of a given set of files.

0

Lumnify

  • Type: cli

Benchmark against thousands of projects, and analyse code for structural quality with focus on maintainability.

0

pelusa

  • Type: cli
445

Static analysis Lint-type tool to improve your OO Ruby code.

0

Pronto

  • Type: cli
2319

Quick automated code review of your changes. Supports more than 40 runners for various languages, including Clang, Elixir, JavaScript, PHP, Ruby and more.

0

quality

  • Type: cli
147

Runs quality checks on your code using community tools, and makes sure your numbers don't get any worse over time.

0

Querly

  • Type: cli
210

Pattern Based Checking Tool for Ruby.

0

Railroader

  • Type: cli
39

An open source static analysis security vulnerability scanner for Ruby on Rails applications.

0

Scrutinizer

  • Type: service

A proprietary code quality checker that can be integrated with GitHub.

0

ShiftLeft Scan

  • Type: cli
  • Type: service
133

Scan is a free open-source DevSecOps platform for detecting security issues in source code and dependencies. It supports a broad range of languages and CI/CD pipelines.

0

Sider

  • Type: service

An automated code reviewing tool. Improving developers' productivity.

0

SmartDec Scanner

  • Type: cli

SAST tool which is capable of identifying vulnerabilities and undocumented features. The analyzer scans the source code and executables without debug info (i.e. binaries). Supports: Java/Scala/Kotlin, PHP, C#, JavaScript, TypeScript, VBScript, HTML5, Python, Perl, C/C++, Objective-C/Swift, PL/SQL, T-SQL, ABAP, 1C, Apex, Go, Ruby, Groovy, Delphi, VBA, Visual Basic 6, Solidity, Vyper, COBOL.

0

Snyk

  • Type: service

Vulnerability scanner for dependencies of node.js apps (free for Open Source Projects).

0

SonarCloud

  • Type: service

Multi-language cloud-based static code analysis. History, trends, security hot-spots, pull request analysis and more. Free for open source.

0

Standard Ruby

  • Type: cli
1137

Ruby Style Guide, with linter & automatic code fixer

-1

APPscreener

  • Type: cli

Static code analysis for binary and source code - Java/Scala, PHP, Javascript, C#, PL/SQL, Python, T-SQL, C/C++, ObjectiveC/Swift, Visual Basic 6.0, Ruby, Delphi, ABAP, HTML5 and Solidity.

-1

Synopsys

  • Type: cli

A commercial static analysis platform that allows for scanning of multiple languages (C/C++, Android, C#, Java, JS, PHP, Python, Node.JS, Ruby, Fortran, and Swift).

Deprecated/unmaintained tools

1

laser

  • Type: cli
390

Static analysis and style linter for Ruby code.

0

ruby-lint

  • Type: cli

Static code analysis for Ruby.

0

SandiMeter

  • Type: cli
749

Static analysis tool for checking Ruby code for Sandi Metz' rules.

❤️ Sponsor this project

We are currently looking for partners who want to sponsor hosting and development of the project.

Check out our Github Sponsors page here

Missing an entry? Please let us know.