Search Results for "code scan"
Sort By:
Showing 63 open source projects for "code scan"
View related business solutions-
Build Agents and Models on One PlatformGemini Enterprise Agent Platform is Google Cloud's comprehensive platform for developers to build, scale, govern, and optimize agents and models. Choose from Google's most advanced models and third-party models like Anthropic's Claude Model Family.
-
Custom VMs From 1 to 96 vCPUs With 99.95% UptimeLive migration and automatic failover keep workloads online through maintenance. One free e2-micro VM every month.
-
1
Semgrep
Lightweight static analysis for many languages
Static analysis at ludicrous speed. Find bugs and enforce code standards. Find and prevent security issues in Terraform, Docker, Kubernetes, nginx, and AWS configs before they go into production. Go beyond application code and protect the entire stack with a breadth of scanning capabilities. Don't leak secrets, scan every commit and ensure secrets don't make it to production. Protect the privileged CI/CD environment from malicious activity that could result in access to source code, secrets, and more. ... -
2
AWS Toolkit for JetBrains
A plugin for interacting with AWS from JetBrains IDEs
...If you come across bugs with the toolkit or have feature requests, please raise an issue on our GitHub repository. See the user guide for how to get started, along with what features/services are supported. CodeWhisperer uses machine learning to generate code suggestions from the existing code and comments in your IDE. Supported languages include: Java, Python, and JavaScript. In addition to providing code suggestions within your current file, CodeWhisperer can scan your code package to identify security issues. Connect to AWS using static credentials, credential process, or AWS SSO. View and manage AWS resources. ... -
3
Checkov
Prevent cloud misconfigurations during build-time for Terraform
Scan cloud resources in build-time for misconfigured attributes with a simple Python policy-as-code framework. Analyze relationships between cloud resources using Checkov’s graph-based YAML policies. Execute, test, and modify runner parameters in the context of a subject repository CI/CD and version control integrations. -
4
Codex Security
SDKs and CLI for Codex Security
Codex Security is an OpenAI command-line tool and TypeScript SDK for discovering, validating, and fixing vulnerabilities in source code. It can scan an entire repository, review code changes, and preserve findings across repeated security assessments. Developers can run it interactively from a terminal or embed it in automated CI workflows. Authentication supports ChatGPT sign-in for local use and API keys for noninteractive environments. The SDK exposes a programmatic interface that launches scans, returns results, and provides the generated report path. ... -
Demo Series - Small Business Backup By VeeamWatch this on-demand demo series and learn how to protect your Microsoft 365 data with clear, simple, actionable steps that are easy to implement for businesses of all sizes.
-
5
SonarJS
SonarSource Static Analyzer for JavaScript and TypeScript
This SonarSource project is a static code analyzer for JavaScript, TypeScript and CSS languages. In order to analyze JavaScript, TypeScript or CSS code, you need to have a supported version of Node.js installed on the machine running the scan. Recommended versions are the previous LTS version v14 and the latest version - v16. We recommend using the latest available LTS version (v16 as of today) for optimal stability and performance. v12 is still supported, but it already reached end-of-life and is deprecated. ... -
6
Bytecode Viewer
A reverse engineering suite (decompiler, editor, debugger and more)
Some of Bytecode Viewer features are that it provides Java Decompiling with Six different decompilers (DJ-GUI/Core, Procyon, CFR, Fernflower, Krakatau, and JADX-Core). Bytecode Decompiling with CFIDE. Android APK integrated with Dex2Jar. Securely launch Java applications and insert hooks via EZ-Injection. Scan for malicious code with the Malicious Code Scanner plugin. Export as DEX, Jar, Class, Zip or Java Source File. Open Android APKs, Android DEX, Java Class Files and Java Jars. (WAR & JSP Support!). Extensively configurable, over 100+ settings! Works seamlessly with all Operating Systems. Integrates BCV into Windows by installing it, it'll associate all .class, .dex and .apk to open with BCV. ... -
7
Periphery
A tool to identify unused code in Swift projects
A tool to identify unused code in Swift projects. The scan command is Periphery's primary function. To begin a guided setup, simply change to your project directory. To get coherent results from Periphery, it's crucial to understand the implications of the build targets you choose to analyze. For example, imagine a project consisting of three targets: App, Lib and Tests. -
8
JSDoc
An API documentation generator for JavaScript
JSDoc 3 is an API documentation generator for JavaScript, similar to Javadoc or phpDocumentor. You add documentation comments directly to your source code, right alongside the code itself. The JSDoc tool will scan your source code and generate an HTML documentation website for you. JSDoc's purpose is to document the API of your JavaScript application or library. It is assumed that you will want to document things like modules, namespaces, classes, methods, method parameters, and so on. ... -
9
Dockle
Container Image Linter for Security
...You can install dockle with the asdf version manager with this plugin, which automates the process of installing (and switching between) various versions of github release binaries. With asdf already installed, run commands to install dockle. You can scan your built image with Dockle in Travis CI/CircleCI. Though, you can ignore the specified target checkpoints by using .dockleignore file. Or, if you just want the results to display and not let the test fail for this, specify --exit-code to 0 in dockle command. -
Go from Code to Production URL in SecondsSkip the Kubernetes configs. Cloud Run handles HTTPS, scaling, and infrastructure automatically. Two million requests free per month.
-
10
Gitleaks
Protect and discover secrets using Gitleaks
Gitleaks is a fast, lightweight, portable, and open-source secret scanner for git repositories, files, and directories. With over 6.8 million docker downloads, 11.2k GitHub stars, 1.7 million GitHub Downloads, thousands of weekly clones, and over 400k homebrew installs, gitleaks is the most trusted secret scanner among security professionals, enterprises, and developers. Gitleaks-Action is our official GitHub Action. You can use it to automatically run a gitleaks scan on all your team's pull... -
11
wa-automate-nodejs
WhatsApp tool for chatbots with advanced features
...For more details see Easy API. After executing create() function, @open-wa/wa-automate will create an instance of WA web. If you are not logged in, it will print a QR code in the terminal. Scan it with your phone and you are ready to go! @open-wa/wa-automate will remember the session so there is no need to authenticate every time. -
12
FengNiao
A command line tool for cleaning unused resources in Xcode
The FengNiao project is a lightweight command-line utility designed to help iOS/macOS developers clean up their Xcode projects by detecting and removing unused image resource files. As projects evolve, image assets often accumulate — many of which may no longer be referenced in code, storyboards, or asset catalogs; FengNiao scans the project directory (and subfolders) to identify those orphaned resources and optionally delete them, helping to reduce project bloat and potential app size. The... -
13
Cardboard SDK
Open source Cardboard SDK and samples
This SDK provides everything you need to create your own Virtual Reality (VR) experiences for Google Cardboard. It supports essential VR features, such as motion tracking, stereoscopic rendering, and user interaction via the viewer button. With these capabilities, you can build entirely new VR experiences, or enhance existing apps with VR capabilities. You can use the Cardboard SDK to turn a smartphone into a VR platform. A smartphone can display 3D scenes with stereoscopic rendering, track... -
14
PowerHub
A post exploitation tool based on a web application
PowerHub is a PowerShell-based automation framework designed to centralize and orchestrate common administrative tasks across Windows environments. It exposes a modular command set for inventorying systems, managing services, deploying packages, and executing remote commands with consistent logging and error handling. The project places emphasis on discoverability and reuse: scripts are organized into reusable modules and functions with clear parameter contracts so teams can compose... -
15
BLESSED for Android
BLESSED, a Bluetooth Low Energy (BLE) library for Android
BLESSED is a very compact Bluetooth Low Energy (BLE) library for Android 5 and higher, that makes working with BLE on Android very easy. It takes care of many aspects of working with BLE you would normally have to take care of yourself. The BLESSED library was inspired by CoreBluetooth on iOS and provides the same level of abstraction, but at the same time it also stays true to Android by keeping most methods the same and allowing you to work with the standard classes for Services,... -
16
Guides
Design and development guides
...The idea is that instead of reinventing style guides or best-practices from scratch, developers can reference this repository for high-quality external guides, articles, and checklists across many languages and ecosystems. It is not a library in the usual sense, but acts as a “meta-guide” index — a directory of authoritative resources rather than runnable code. The content is organized as Markdown links and descriptions, making it easy to scan and browse for relevant topics (for instance style guides for Ruby, JavaScript, CSS, deployment, architecture). Because it is community-driven and open to contributions, you’ll find new links and categories being added over time, helping it remain relevant. -
17
Papermerge
Open Source Document Management System for Digital Archives
...Source code can be reviewed and improved by anyone from anywhere. Papermerge supports multiple users. Each user can be assigned different permissions to perform only a specific kind of action e.g. view only documents from a specific folder. OCR technology is vital part of Papermerge. It extracts text information from scanned documents, PDF, JPEG, TIFF files. -
18
EnvTunnel
A free, local-first desktop tool that scans for active dev servers
...debug=true or any path to the QR URL 📋 Copy URL One-click copy of the full address to clipboard 💾 Save QR Export QR code as PNG image 🖥️ System Tray Minimizes to tray. Click to restore, right-click to quit 🚀 Autostart Optional launch with Windows -
19
Geyer
convert files, image preview, file recovery
Github Main: https://github.com/artgey/BIN-HEX-file-converter Future Update Status: https://github.com/artgey/Geyer/projects Can convert any file to to a .bin, .hex, .rom format and back to its origin format ("experimental" and only for a few specific File formats) Can recover .braw files Installer Key: 5379-0509-1344-1315 for v1.3.3 v1.3.3 Key: https://github.com/artgey/Geyer/releases/tag/v1.3.3 First Install v1.3.3 then the v1.3.3.1 (hot fix for Recovery scan) -
20
Xinorbis (and tools)
Source code for Xinorbis and associated tools
Xinorbis 10 coming Summer/Autumn 2026. C++ rewrite and remaster in progress. Fully open source. Checkout "github.com/MaximumOctopus/Xinorbis" for updates and code. Xinorbis is a very powerful hard disk, folder and storage analyser. It uses a sophisticated mix of graphs, tables, and tree displays to give a complete, and unprecedented, picture of the contents of any hard disk, SSD, folder, removable or network drive. In fact, if your PC can see it, Xinorbis can scan it. Xinorbis makes it easy to see the contents, structure, file distribution, and file composition of any attached storage device. ... -
21
ReacType
Prototyping Tool for exporting React/Typescript Applications!
ReacType is a rapid prototyping tool built on Electron that allows users visualize their application architecture dynamically, employing a drag-and-drop canvas display and an interactive, real-time component code preview that can be exported as a React app for developers employing React component architecture alongside the comprehensive type-checking of TypeScript. In other words, you can draw prototypes and export React / TypeScript code! After opening the dmg and dragging ReacType into your Applications folder, ctrl+click the icon and select 'Open' from the context menu to run the app. ... -
22
Enlightn
Your performance & security consultant, an artisan command away
...The Enlightn OSS (open source software) version has 64 automated checks that scan your application code, web server configurations, and routes to identify performance bottlenecks, possible security vulnerabilities, and code reliability issues. Enlightn Pro (commercial) is available for purchase on the Enlightn website and has an additional 64 automated checks (a total of 128 checks). Serving Assets: Minification, cache headers, CDN, and compression headers. -
23
Coca
Coca is a toolbox which is design for legacy system refactoring
Coca is a toolbox that is design for legacy system refactoring and analysis, including call graph, concept analysis, api tree, and design patterns suggestions. Requirements: graphviz for dot file to image (such as svg, png). The easiest way to get coca is to use one of the pre-built release binaries which are available for OSX, Linux, and Windows on the release page. -
24
Open Food Facts
Native version of Open Food Facts on Android
Open Food Facts is a collaborative food products database made by everyone, for everyone. Open Food Facts contributors gather information and data on food products from around the world, using mobile apps. Open Food Facts is a database of food products with ingredients, allergens, and nutrition facts… which allow us to compute scores like Nutri-Score, NOVA groups, and Eco-Score. Open Food Facts is a non-profit association of volunteers. 25,000+ contributors like you have added 3M+ products... -
25
Security Code Scan
Vulnerability Patterns Detector for C# and VB.NET
...Visual Studio Community, Professional and Enterprise editions are supported. Other editors that support Roslyn-based analyzers like Rider or OmniSharp should work too. Security Code Scan (SCS) is not a Linter. It is a real static analysis tool that does extensive computations. Thus installing it as a Visual Studio extension or NuGet package will slow down your Visual Studio IDE.
