Vulnerability Static Analysis for Containers

A vulnerability scanner for container images and filesystems

🐶 Automated code review tool integrated with any code analysis tools regardless of programming language

Go security checker

Tfsec is now part of Trivy

Staticcheck - The advanced Go linter

Visualize call graph of a Go program using Graphviz

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

🔥 ~6x faster, stricter, configurable, extensible, and beautiful drop-in replacement for golint

🦩 Tools for Go projects

A Golang tool that does static analysis, unit testing, code review and generate code quality report.

Static analysis tool to detect potential nil panics in Go code

KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best practices.

A static analysis tool for securing Go code

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

A curated list of awesome Go linters. More than 60 linters and tools!

OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the community.

Define and run pattern-based custom linting rules.

APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their code.