PyT - Python Taint
A static analysis tool for detecting security vulnerabilities in Python web applications.
38 Alternatives for PyT - Python Taint
Bowler
Safe code refactoring for modern Python. Bowler is a refactoring tool for manipulating Python at the syntax tree level. It enables safe, large scale code modifications while guaranteeing that the resulting code compiles and runs. It provides both a simple command line interface and a fluent API in Python for generating complex code modifications in code.
InspectorTiger
IT, Inspector Tiger, is a modern python code review tool / framework. It comes with bunch of pre-defined handlers which warns you about improvements and possible bugs. Beside these handlers, you can write your own or use community ones.
mypy
A static type checker that aims to combine the benefits of duck typing and static typing, frequently used with MonkeyType.
pycodestyle
(Formerly pep8
) Check Python code against some of the style conventions in PEP 8.
27 Multi-Language Tools
ApplicationInspector
Creates reports of over 400 rule patterns for feature detection (e.g. the use of cryptography or version control in apps).
APPscreener
Static code analysis for binary and source code - Java/Scala, PHP, Javascript, C#, PL/SQL, Python, T-SQL, C/C++, ObjectiveC/Swift, Visual Basic 6.0, Ruby, Delphi, ABAP, HTML5 and Solidity.
- abap
- c
- csharp
- cpp
- delphi
- java
- javascript
- objectivec
- php
- plsql
- python
- ruby
- scala
- swift
- tsql
- vbasic
- html
- smart-contracts
cpp-linter-action
A Github Action for linting C/C++ code integrating clang-tidy and clang-format to collect feedback provided in the form of thread comments and/or annotations.
emerge
Emerge is a source code and dependency visualizer that can be used to gather insights about source code structure, metrics, dependencies and complexity of software projects. After scanning the source code of a project it provides you an interactive web interface to explore and analyze your project by using graph structures.
lizard
Lizard is an extensible Cyclomatic Complexity Analyzer for many programming languages including C/C++ (doesn't require all the header files or Java imports). It also does copy-paste detection (code clone detection/code duplicate detection) and many other forms of static code analysis. Counts lines of code without comments, CCN (cyclomatic complexity number), token count of functions, parameter count of functions.
Mega-Linter
Mega-Linter can handle any type of project thanks to its 70+ embedded Linters, its advanced reporting, runnable on any CI system or locally, with assisted installation and configuration, able to apply formatting and fixes
- dotnet
- apex
- c
- csharp
- cpp
- clojure
- coffeescript
- dart
- go
- groovy
- java
- javascript
- jsx
- kotlin
- lwc
- lua
- perl
- php
- powershell
- python
- r
- raku
- ruby
- rust
- scala
- shell
- sql
- typescript
- vbnet
- dotenv
- ansible
- arm
- cloudformation
- configfile
- configmanagement
- container
- ci
- css
- dockerfile
- formatter
- gherkin
- html
- json
- kubernetes
- latex
- markdown
- nodejs
- protobuf
- puppet
- terraform
- vue
- writing
- xml
- yaml
OpenStaticAnalyzer
OpenStaticAnalyzer is a source code analyzer tool, which can perform deep static analysis of the source code of complex systems.
pylama
Code audit tool for Python and JavaScript. Wraps pycodestyle, pydocstyle, PyFlakes, Mccabe, Pylint, and more
Semgrep
A fast, open-source, static analysis tool for finding bugs and enforcing code standards at editor, commit, and CI time. Its rules look like the code you already write; no abstract syntax trees or regex wrestling. Supports 17+ languages.
- c
- csharp
- go
- java
- javascript
- jsx
- ocaml
- php
- python
- ruby
- typescript
- configmanagement
- ci
- dockerfile
- json
- kubernetes
- nodejs
- rails
- security
- terraform
- yaml
Sigrid
Sigrid helps you to improve your software by measuring your system's code quality, and then compares the results against a benchmark of thousands of industry systems to give you concrete advice on areas where you can improve.
- c
- csharp
- cpp
- delphi
- go
- groovy
- java
- javascript
- kotlin
- lua
- objectivec
- perl
- php
- plsql
- powershell
- python
- r
- ruby
- rust
- scala
- shell
- sql
- swift
- typescript
- vbnet
- nodejs
- vue
StaticReviewer
Static Reviewer executes code checks according to the most relevant Secure Coding Standards, OWASP, CWE, CVE, CVSS, MISRA, CERT, for 40+ programming languages, using 1000+ built-in validation rules for Security, Deadcode & Best Practices Available a module for Software Composition Analysis (SCA) to find vulnerabilities in open source and third party libraries.
- abap
- actionscript
- asp
- apex
- aspnet
- c
- csharp
- cpp
- clojure
- cobol
- go
- groovy
- java
- javascript
- jsp
- kotlin
- lua
- objectivec
- php
- plsql
- powershell
- python
- r
- rust
- scala
- shell
- sql
- swift
- tsql
- typescript
- vbnet
- vba
- json
- xml
TencentCodeAnalysis
Tencent Cloud Code Analysis (TCA for short, code-named CodeDog inside the company early) is a comprehensive platform for code analysis and issue tracking. TCA consist of three components, server, web and client. It integrates of a number of self-developed tools, and also supports dynamic integration of code analysis tools in various programming languages.
trunk
Modern repositories include many technologies, each with its own set of linters. With 30+ linters and counting, Trunk makes it dead-simple to identify, install, configure, and run the right linters, static analyzers, and formatters for all your repos.
- c
- cpp
- go
- java
- javascript
- python
- ruby
- rust
- typescript
- ansible
- cloudformation
- dockerfile
- markdown
- protobuf
- terraform
Help make this list better
Suggest Tools