Skip to content

Commit 4996eff

Browse files
author
Analysis Tools Bot
committed
Commit list
1 parent e4dfde4 commit 4996eff

2 files changed

Lines changed: 8 additions & 15 deletions

File tree

README.md

Lines changed: 4 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -168,7 +168,7 @@ Also check out the sister project, [awesome-dynamic-analysis](https://github.com
168168

169169
- [ESBMC](http://esbmc.org) — ESBMC is an open source, permissively licensed, context-bounded model checker based on satisfiability modulo theories for the verification of single- and multi-threaded C/C++ programs.
170170

171-
- **flawfinder** :warning: — Finds possible security weaknesses.
171+
- [flawfinder](http://dwheeler.com/flawfinder/) — Finds possible security weaknesses.
172172

173173
- **flint++** :warning: — Cross-platform, zero-dependency port of flint, a lint program for C++ developed and used at Facebook.
174174

@@ -268,7 +268,7 @@ Also check out the sister project, [awesome-dynamic-analysis](https://github.com
268268

269269
- [ESBMC](http://esbmc.org) — ESBMC is an open source, permissively licensed, context-bounded model checker based on satisfiability modulo theories for the verification of single- and multi-threaded C/C++ programs.
270270

271-
- **flawfinder** :warning: — Finds possible security weaknesses.
271+
- [flawfinder](http://dwheeler.com/flawfinder/) — Finds possible security weaknesses.
272272

273273
- **flint++** :warning: — Cross-platform, zero-dependency port of flint, a lint program for C++ developed and used at Facebook.
274274

@@ -907,8 +907,6 @@ It uses the pycodestyle utility to determine what parts of the code needs to be
907907

908908
- **ciocheck** :warning: — Linter, formatter and test suite helper. As a linter, it is a wrapper around `pep8`, `pydocstyle`, `flake8`, and `pylint`.
909909

910-
- [Code Pathfinder](https://codepathfinder.dev) — An open-source security suite aiming to combine structural code analysis with AI-powered vulnerability detection. Built for advanced structural search, derive insights, find vulnerabilities in code.
911-
912910
- **cohesion** :warning: — A tool for measuring Python class cohesion.
913911

914912
- [deal](https://deal.readthedocs.io/) — Design by contract for Python. Write bug-free code. By adding a few decorators to your code, you get for free tests, static analysis, formal verification, and much more.
@@ -1383,6 +1381,8 @@ It supports multiple languages and is designed to be extensible, allowing you to
13831381

13841382
- [Code Intelligence](https://www.code-intelligence.com) :copyright: — CI/CD-agnostic DevSecOps platform which combines industry-leading fuzzing engines for finding bugs and visualizing code coverage
13851383

1384+
- [Code Pathfinder](https://codepathfinder.dev) — Opensource Static Code Analysis for security teams with Inter file dataflow taint analysis. Built for finding vulnerabilities, advanced structural search, derive insights and supports MCP server.
1385+
13861386
- [Code-Graph-RAG](https://code-graph-rag.com) — Builds knowledge graphs from multi-language codebases using Tree-sitter AST parsing and stores them in Memgraph. Supports 11 programming languages with a unified graph schema and enables natural language querying and editing of code structure and relationships. Functions as an MCP server for AI assistant integration.
13871387

13881388
- [Codeac](https://www.codeac.io/?ref=awesome-static-analysis) :copyright: — Automated code review tool integrates with GitHub, Bitbucket and GitLab (even self-hosted). Available for JavaScript, TypeScript, Python, Ruby, Go, PHP, Java, Docker, and more. (open-source free)
@@ -1823,8 +1823,6 @@ Loading address: binbloom can parse a raw binary firmware and determine its load
18231823

18241824
- [clair](https://github.com/coreos/clair) — Vulnerability Static Analysis for Containers.
18251825

1826-
- [Code Pathfinder](https://codepathfinder.dev) — An open-source security suite aiming to combine structural code analysis with AI-powered vulnerability detection. Built for advanced structural search, derive insights, find vulnerabilities in code.
1827-
18281826
- **collector** :warning: — Run arbitrary scripts inside containers, and gather useful information.
18291827

18301828
- **dagda** :warning: — Perform static analysis of known vulnerabilities in docker images/containers.
@@ -1863,8 +1861,6 @@ It identifies potential security risks in K8s RBAC design and makes suggestions
18631861

18641862
- [Code Climate](https://codeclimate.com) — The open and extensible static analysis platform, for everyone.
18651863

1866-
- [Code Pathfinder](https://codepathfinder.dev) — An open-source security suite aiming to combine structural code analysis with AI-powered vulnerability detection. Built for advanced structural search, derive insights, find vulnerabilities in code.
1867-
18681864
- [Codecov](https://about.codecov.io/) :copyright: — Codecov is a company that provides code coverage tools for developers and engineering leaders to gain visibility into their code coverage.
18691865
They offer flexible and unified reporting, seamless coverage insights, and robust coverage controls. Codecov supports over 20 languages and is CI/CD agnostic. Over 29,000 organizations and 1 million developers use Codecov. Codecov has recently joined Sentry.
18701866

@@ -1919,8 +1915,6 @@ Its technology helps developers automate testing, find bugs, and reduce manual l
19191915

19201916
- [Cloud (IaC) Security for JetBrains IDEs](https://plugins.jetbrains.com/plugin/25413-cloud-iac-security) — Cloud (IaC) Security plugin for JetBrains IDEs. Performs real-time inspections of Docker & Kubernetes IaC with 50+ rules based on Docker image/build security best practices, Kubernetes Pod Security Standards, and NSA/CISA Kubernetes Hardening Guidance.
19211917

1922-
- [Code Pathfinder](https://codepathfinder.dev) — An open-source security suite aiming to combine structural code analysis with AI-powered vulnerability detection. Built for advanced structural search, derive insights, find vulnerabilities in code.
1923-
19241918
- [Dockle](https://github.com/goodwithtech/dockle) — Container Image Linter for Security helping build the Best-Practice Docker Image. Scans Docker images for security vulnerabilities and CIS Benchmark compliance. Checks for secrets, credential exposure, and security best practices. Provides multiple severity levels (FATAL, WARN, INFO) and supports various output formats for CI/CD integration.
19251919

19261920

@@ -2219,8 +2213,6 @@ but with the following improvements:
22192213

22202214
- [Cloud (IaC) Security for JetBrains IDEs](https://plugins.jetbrains.com/plugin/25413-cloud-iac-security) — Cloud (IaC) Security plugin for JetBrains IDEs. Performs real-time inspections of Docker & Kubernetes IaC with 50+ rules based on Docker image/build security best practices, Kubernetes Pod Security Standards, and NSA/CISA Kubernetes Hardening Guidance.
22212215

2222-
- [Code Pathfinder](https://codepathfinder.dev) — An open-source security suite aiming to combine structural code analysis with AI-powered vulnerability detection. Built for advanced structural search, derive insights, find vulnerabilities in code.
2223-
22242216
- [Credential Digger](https://github.com/SAP/credential-digger) — Credential Digger is a GitHub scanning tool that identifies hardcoded credentials (Passwords, API Keys, Secret Keys, Tokens, personal information, etc), and filtering the false positive data through a machine learning model called [Password Model](https://huggingface.co/SAPOSS/password-model). This scanner is able to detect passwords and non structured tokens with a low false positive rate.
22252217

22262218
- [Datree](https://datree.io/) — A CLI tool to prevent Kubernetes misconfigurations by ensuring that manifests and Helm charts follow best practices as well as your organization’s policies

data/api/tools.json

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -3361,6 +3361,7 @@
33613361
"linter"
33623362
],
33633363
"languages": [
3364+
"go",
33643365
"python"
33653366
],
33663367
"other": [
@@ -3370,7 +3371,7 @@
33703371
"security"
33713372
],
33723373
"licenses": [
3373-
"AGPL-3.0"
3374+
"Apache-2.0"
33743375
],
33753376
"types": [
33763377
"cli"
@@ -3379,7 +3380,7 @@
33793380
"source": "https://github.com/shivasurya/code-pathfinder",
33803381
"pricing": null,
33813382
"plans": null,
3382-
"description": "An open-source security suite aiming to combine structural code analysis with AI-powered vulnerability detection. Built for advanced structural search, derive insights, find vulnerabilities in code.",
3383+
"description": "Opensource Static Code Analysis for security teams with Inter file dataflow taint analysis. Built for finding vulnerabilities, advanced structural search, derive insights and supports MCP server.",
33833384
"discussion": null,
33843385
"deprecated": null,
33853386
"resources": [
@@ -7598,7 +7599,7 @@
75987599
"plans": null,
75997600
"description": "Finds possible security weaknesses.",
76007601
"discussion": null,
7601-
"deprecated": true,
7602+
"deprecated": null,
76027603
"resources": null,
76037604
"reviews": null,
76047605
"demos": null,

0 commit comments

Comments
 (0)