Packages that audit existing source code for vulnerability analysis.

Tool count: 34

BlackArch code-audit
Name Version Description Homepage
bandit 1.7.7 Python security linter from OpenStack Security
bof-detector 19.e08367d A simple detector of BOF vulnerabilities by source-code-level check.
brakeman v6.1.2.1.r3.g76b50de03 A static analysis security vulnerability scanner for Ruby on Rails applications.
cflow 1.7 A C program flow analyzer.
checkov 3.2.96.r0.g6c3b45ca4 Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages.
cppcheck 2.12.0 A tool for static C/C++ code analysis
cpptest 2.0.0 A portable and powerful, yet simple, unit testing framework for handling automated tests in C++.
detect-secrets v1.5.0.r8.gb02ff0d An enterprise friendly way of detecting and preventing secrets in code.
devaudit 803.ca0a68e An open-source, cross-platform, multi-purpose security auditing tool targeted at developers and teams.
dscanner 0.15.2 Swiss-army knife for D source code
flawfinder 2.0.19 Searches through source code for potential security flaws
githound v1.7.1.r15.g1d20536 Find secret information in git repositories.
graudit 621.675eaa9 Grep rough source code auditing tool.
horusec v2.9.0.beta.2.r1.g873d4104 Static code analysis to identify security flaws for many languages.
local-php-security-checker v2.1.3.r0.g4f59cf8 A command line tool that checks your PHP application packages with known security vulnerabilities.
mosca 130.a7e725d Static analysis tool to find bugs like a grep unix command.
njsscan 0.3.1 A static application testing (SAST) tool that can find insecure code patterns in your node.js applications.
phpstan 10806.3cb6d5957 PHP Static Analysis Tool - discover bugs in your code without running it.
pscan 1.3 A limited problem scanner for C source files
rats 6.4ba54ce A rough auditing tool for security in source code files.
semgrep 1.72.0 Lightweight static analysis for many languages.
shellcheck 0.10.0 Shell script analysis tool
slither 4441.1a50b8ef0 Solidity static analysis framework written in Python 3.
snyk 1.1283.0 CLI and build-time tool to find and fix known vulnerabilities in open-source dependencies.
sonar-scanner Generic CLI tool to launch project analysis on SonarQube servers.
splint 3.1.2.git20180129 A tool for statically checking C programs for security vulnerabilities and coding mistakes
spotbugs 17383.9563fb9e3 A tool for static analysis to look for bugs in Java code.
stoq 769.8bfc78b An open source framework for enterprise level automated analysis.
tell-me-your-secrets v2.4.2.r2.g873a4c9 Find secrets on any machine from over 120 Different Signatures.
trufflehog v3.76.3.r4.g4f833cbfa Searches through git repositories for high entropy strings, digging deep into commit history.
whispers 2.2.1.r3.g8f17f77 Identify hardcoded secrets in static structured text.
wpbullet 34.6185112 A static code analysis for WordPress (and PHP).
wscript 201.0410be2 Emulator/tracer of the Windows Script Host functionality.
yasca 2.1 Multi-Language Static Analysis Toolset.