Search awesome repositories

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).

Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/repo-map/

An AI-powered GitHub code review tool that uses LLMs to detect high-confidence, high-impact issues—such as security vulnerabilities, bugs, and maintainability concerns.

Linux anti-debugging and anti-analysis rust library

A plugin based on IDAPython for a functional DWIM interface. Current development against most recent IDA is in the "persistence-refactor" branch, ancient (but stable) work is in "master", so... create an issue if you want/need something backported. Use "Wiki" or "Discussions" for examples, and smash that "Star" button if you like this.

Dlint is a tool for encouraging best coding practices and helping ensure we're writing secure Python code.

Checks syntax of reStructuredText and code blocks nested within it

OPEM (Open Source PEM Fuel Cell Simulation Tool)

Library containing Anti-RE and Anti-Debug methods.

MCP server that orchestrates language servers into agent-native workflows. 65 tools, 30 CI-verified languages.

An extendable and customisable Zig linter that is integrated from source into your build.zig.

AI-powered code review tool that analyzes git branch differences and generates comprehensive review reports. Supports AWS Bedrock and Anthropic API. Features automated analysis of logic, security, performance, and code quality with smart token efficiency through prompt caching.

A static analyzer and linter for Zig

Web service version of https://github.com/guykisel/inline-plz - lints your Pull Requests and comments inline on the diffs!

EQU8 User-Mode Bypass and Injector

AI code security scanner MCP server — detects invisible Unicode, Trojan Source, homoglyphs, Glassworm steganography, rules file backdoors, and dependency attacks in AI-generated code. Static analysis + CodeBERT deep learning. Runs locally.

Read-only static audit skill for Python projects (Ruff + Vulture + Radon + Pylint via uvx). Generates a single Markdown health report with a deterministic A–F grade and 3-item action plan. 100% pass rate vs 29% baseline.

Self-healing technical docs in CI. A GitHub Action that detects documentation invalidated by a PR's code changes and commits surgical, style-preserving fixes onto the PR branch. Deterministic tree-sitter link graph picks suspects; an agentic LLM verifier + repairer does the rest. Python, TypeScript, C#.