Gitleaks
Detects secrets in git repositories and files
SonarQube
Automated code review, quality and security analysis
Tool overview
SonarQube performs automated static analysis and code review for more than 40 programming languages and frameworks. It tracks maintainability, reliability and technical debt, detects vulnerabilities and security hotspots, suggests fixes and integrates with CI/CD workflows.
It is available as SonarQube Cloud (SaaS) or SonarQube Server (self-managed); a free start is offered alongside commercial plans.
Useful links
Official website
Screenshots & video
Community reviews
Login to Write Your ReviewThere are no reviews yet.
Source & attribution
Original contributor
Jean-Baptiste CROUIGNEAU
Original listing URL
External references
https://www.sonarsource.com/products/sonarqube/
CSS HTML Validator
Offline HTML, CSS and accessibility validator
Frama-C
Platform for analysis and formal verification of C source code
Clang Static Analyzer
Source code analysis tool for C, C++ and Objective-C, part of Clang
dotTEST
Static analysis, unit testing and coverage for C# and VB.NET
AdaControl
Rule-based static analysis tool for Ada source code