Search Results for "static code analysis"

FOSSA CLI is a command-line tool that scans your codebase to identify open-source dependencies and their associated licenses and vulnerabilities. It integrates into CI/CD pipelines to provide automated compliance checks, license audits, and security analysis. Designed for enterprise software teams, FOSSA CLI helps enforce open-source policies at scale and provides accurate, automated insights into third-party software usage through deep analysis of transitive dependencies and...

The Gradle Lint Plugin is a static analysis tool for Gradle build scripts (written in Groovy) that finds patterns of misuse, deprecated constructs, and opportunities for optimization in build configurations. It functions analogous to ESLint in the JavaScript ecosystem: you define rules, apply them across the build scripts, and get warnings or errors when code deviates from best practices.