Search Results for "code scan"
Sort By:
Showing 40 open source projects for "code scan"
View related business solutions-
Ship Agents FasterGemini Enterprise Agent Platform lets you rapidly build, scale, govern and optimize production-ready agents grounded in your organization's data. The platform enables developers to build custom or pre-built agents for virtually any use case. New customers get $300 in free credits.
-
Paessler: Easy to Use With Enterprise Power. Free TrialYou shouldn't have to choose between a monitoring tool that's easy to use and one that's powerful enough for a complex environment. PRTG's low-code interface lets any admin build dashboards, set alerts and monitor devices without scripting, while custom sensors and full API access are there when your team needs deeper control. One platform, no compromise. Download a free 30-day trial now.
-
1
Semgrep
Lightweight static analysis for many languages
Static analysis at ludicrous speed. Find bugs and enforce code standards. Find and prevent security issues in Terraform, Docker, Kubernetes, nginx, and AWS configs before they go into production. Go beyond application code and protect the entire stack with a breadth of scanning capabilities. Don't leak secrets, scan every commit and ensure secrets don't make it to production. Protect the privileged CI/CD environment from malicious activity that could result in access to source code, secrets, and more. ... -
2
SCANOSS SBOM Workbench
Graphical user interface to scan and audit your source code
SCANOSS SBOM Workbench is a free, open-source graphical application designed for analyzing software source code and identifying third-party components. It uses the SCANOSS API to scan project directories and detect open-source code dependencies. The software helps developers examine licensing information and investigate potential compliance issues. Users can review identified components and generate software bills of materials in SPDX-Lite format. -
3
Checkov
Prevent cloud misconfigurations during build-time for Terraform
Scan cloud resources in build-time for misconfigured attributes with a simple Python policy-as-code framework. Analyze relationships between cloud resources using Checkov’s graph-based YAML policies. Execute, test, and modify runner parameters in the context of a subject repository CI/CD and version control integrations. -
4
Codex Security
SDKs and CLI for Codex Security
Codex Security is an OpenAI command-line tool and TypeScript SDK for discovering, validating, and fixing vulnerabilities in source code. It can scan an entire repository, review code changes, and preserve findings across repeated security assessments. Developers can run it interactively from a terminal or embed it in automated CI workflows. Authentication supports ChatGPT sign-in for local use and API keys for noninteractive environments. The SDK exposes a programmatic interface that launches scans, returns results, and provides the generated report path. ... -
$300 Free Credits to Build on Google CloudPut your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.
-
5
AWS Toolkit for JetBrains
A plugin for interacting with AWS from JetBrains IDEs
...If you come across bugs with the toolkit or have feature requests, please raise an issue on our GitHub repository. See the user guide for how to get started, along with what features/services are supported. CodeWhisperer uses machine learning to generate code suggestions from the existing code and comments in your IDE. Supported languages include: Java, Python, and JavaScript. In addition to providing code suggestions within your current file, CodeWhisperer can scan your code package to identify security issues. Connect to AWS using static credentials, credential process, or AWS SSO. View and manage AWS resources. ... -
6
Gitleaks
Protect and discover secrets using Gitleaks
Gitleaks is a fast, lightweight, portable, and open-source secret scanner for git repositories, files, and directories. With over 6.8 million docker downloads, 11.2k GitHub stars, 1.7 million GitHub Downloads, thousands of weekly clones, and over 400k homebrew installs, gitleaks is the most trusted secret scanner among security professionals, enterprises, and developers. Gitleaks-Action is our official GitHub Action. You can use it to automatically run a gitleaks scan on all your team's pull... -
7
wa-automate-nodejs
WhatsApp tool for chatbots with advanced features
...For more details see Easy API. After executing create() function, @open-wa/wa-automate will create an instance of WA web. If you are not logged in, it will print a QR code in the terminal. Scan it with your phone and you are ready to go! @open-wa/wa-automate will remember the session so there is no need to authenticate every time. -
8
Dockle
Container Image Linter for Security
...You can install dockle with the asdf version manager with this plugin, which automates the process of installing (and switching between) various versions of github release binaries. With asdf already installed, run commands to install dockle. You can scan your built image with Dockle in Travis CI/CircleCI. Though, you can ignore the specified target checkpoints by using .dockleignore file. Or, if you just want the results to display and not let the test fail for this, specify --exit-code to 0 in dockle command. -
9
PowerHub
A post exploitation tool based on a web application
PowerHub is a PowerShell-based automation framework designed to centralize and orchestrate common administrative tasks across Windows environments. It exposes a modular command set for inventorying systems, managing services, deploying packages, and executing remote commands with consistent logging and error handling. The project places emphasis on discoverability and reuse: scripts are organized into reusable modules and functions with clear parameter contracts so teams can compose... -
Train ML Models With SQL You Already KnowBuild and deploy ML models using familiar SQL. Automate data prep with built-in Gemini. Query 1 TB and store 10 GB free monthly.
-
10
FengNiao
A command line tool for cleaning unused resources in Xcode
The FengNiao project is a lightweight command-line utility designed to help iOS/macOS developers clean up their Xcode projects by detecting and removing unused image resource files. As projects evolve, image assets often accumulate — many of which may no longer be referenced in code, storyboards, or asset catalogs; FengNiao scans the project directory (and subfolders) to identify those orphaned resources and optionally delete them, helping to reduce project bloat and potential app size. The... -
11
JSDoc
An API documentation generator for JavaScript
JSDoc 3 is an API documentation generator for JavaScript, similar to Javadoc or phpDocumentor. You add documentation comments directly to your source code, right alongside the code itself. The JSDoc tool will scan your source code and generate an HTML documentation website for you. JSDoc's purpose is to document the API of your JavaScript application or library. It is assumed that you will want to document things like modules, namespaces, classes, methods, method parameters, and so on. ... -
12
Guides
Design and development guides
...The idea is that instead of reinventing style guides or best-practices from scratch, developers can reference this repository for high-quality external guides, articles, and checklists across many languages and ecosystems. It is not a library in the usual sense, but acts as a “meta-guide” index — a directory of authoritative resources rather than runnable code. The content is organized as Markdown links and descriptions, making it easy to scan and browse for relevant topics (for instance style guides for Ruby, JavaScript, CSS, deployment, architecture). Because it is community-driven and open to contributions, you’ll find new links and categories being added over time, helping it remain relevant. -
13
Papermerge
Open Source Document Management System for Digital Archives
...Source code can be reviewed and improved by anyone from anywhere. Papermerge supports multiple users. Each user can be assigned different permissions to perform only a specific kind of action e.g. view only documents from a specific folder. OCR technology is vital part of Papermerge. It extracts text information from scanned documents, PDF, JPEG, TIFF files. -
14
crossfire
Port any project between Windows, macOS, Linux and FreeBSD — scan, convert and build with a beautiful GUI
-
15
Xinorbis (and tools)
Source code for Xinorbis and associated tools
Xinorbis 10 coming Summer/Autumn 2026. C++ rewrite and remaster in progress. Fully open source. Checkout "github.com/MaximumOctopus/Xinorbis" for updates and code. Xinorbis is a very powerful hard disk, folder and storage analyser. It uses a sophisticated mix of graphs, tables, and tree displays to give a complete, and unprecedented, picture of the contents of any hard disk, SSD, folder, removable or network drive. In fact, if your PC can see it, Xinorbis can scan it. Xinorbis makes it easy to see the contents, structure, file distribution, and file composition of any attached storage device. ... -
16
ReacType
Prototyping Tool for exporting React/Typescript Applications!
ReacType is a rapid prototyping tool built on Electron that allows users visualize their application architecture dynamically, employing a drag-and-drop canvas display and an interactive, real-time component code preview that can be exported as a React app for developers employing React component architecture alongside the comprehensive type-checking of TypeScript. In other words, you can draw prototypes and export React / TypeScript code! After opening the dmg and dragging ReacType into your Applications folder, ctrl+click the icon and select 'Open' from the context menu to run the app. ... -
17
Enlightn
Your performance & security consultant, an artisan command away
...The Enlightn OSS (open source software) version has 64 automated checks that scan your application code, web server configurations, and routes to identify performance bottlenecks, possible security vulnerabilities, and code reliability issues. Enlightn Pro (commercial) is available for purchase on the Enlightn website and has an additional 64 automated checks (a total of 128 checks). Serving Assets: Minification, cache headers, CDN, and compression headers. -
18
Coca
Coca is a toolbox which is design for legacy system refactoring
Coca is a toolbox that is design for legacy system refactoring and analysis, including call graph, concept analysis, api tree, and design patterns suggestions. Requirements: graphviz for dot file to image (such as svg, png). The easiest way to get coca is to use one of the pre-built release binaries which are available for OSX, Linux, and Windows on the release page. -
19
Open Food Facts
Native version of Open Food Facts on Android
Open Food Facts is a collaborative food products database made by everyone, for everyone. Open Food Facts contributors gather information and data on food products from around the world, using mobile apps. Open Food Facts is a database of food products with ingredients, allergens, and nutrition facts… which allow us to compute scores like Nutri-Score, NOVA groups, and Eco-Score. Open Food Facts is a non-profit association of volunteers. 25,000+ contributors like you have added 3M+ products... -
20
Security Code Scan
Vulnerability Patterns Detector for C# and VB.NET
...Visual Studio Community, Professional and Enterprise editions are supported. Other editors that support Roslyn-based analyzers like Rider or OmniSharp should work too. Security Code Scan (SCS) is not a Linter. It is a real static analysis tool that does extensive computations. Thus installing it as a Visual Studio extension or NuGet package will slow down your Visual Studio IDE. -
21
CovidPass
Web app for adding EU Digital COVID Certificates to your wallet apps
...CovidPass accomplishes this without sending your data to a server and instead only uses a hashed representation for the signing step. Add your COVID European Digital Certificate to your favorite Wallet application for your mobile. Scan the QR code on your certificate, or select a screenshot or PDF containing the QR code. Select a background color for your passport in the portfolio. Data privacy is of particular importance when processing health-related data. So that you can make an informed decision, please read the Privacy Policy. Processing of your data happens entirely in your browser and only a hashed representation is sent to the server for the signing step. -
22
Sulla
Javascript Whatsapp API library for chatbots
...As much as I would love to, I cannot dedicate a lot of time to this project so please consider checking out forked versions of sulla where other developers can dedicate more time and support to it. After executing create() function, sulla will create an instance of WhatsApp web. If you are not logged in, it will print a QR code in the terminal. Scan it with your phone and you are ready to go! Sulla will remember the session so there is no need to authenticate every time. By default QR code will appear on the terminal. The decryption is being done as fast as possible (outruns native methods). Supports big files! -
23
phpcs-security-audit v3
A set of PHP_CodeSniffer rules that finds vulnerabilities
phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code. It currently has core PHP rules as well as Drupal 7-specific rules. The tool also checks for CVE issues and security advisories related to the CMS/framework. This enables you to follow the versioning of components during static code analysis. The main reason for this project being an extension of PHP_CodeSniffer is to have easy integration into continuous... -
24
Code Catalog in Python
Algorithms and data structures for review for coding interview
code-catalog-python serves as a grab-bag of small, readable Python examples that illustrate common algorithms, data structures, and utility patterns. Each snippet aims to be self-contained and easy to study, with clear inputs, outputs, and the essential logic on display. The catalog format lets you scan for an example, copy it, and adapt it to your use case without wading through a large framework. -
25
git-secrets
Prevents you from committing secrets and credentials into git
...It works by applying configurable regular-expression patterns over commit contents (and merge history) and rejecting commits or merges that violate the policy. The tool includes hooks that integrate into git commit and git merge, as well as commands to list, add, or remove secret patterns, and to scan existing history for leaks. Teams often deploy it as part of their developer toolchain to enforce a security guardrail: you catch leaks early rather than discovering them later. It is also often used in CI pipelines or continuous code quality checks to detect in-flight vulnerabilities. While git-secrets is not a full secrets management system, it plays a key role in defense-in-depth by preventing accidental exposure in source.
