This repository lists static analysis tools for all programming languages, build tools, config files and more.
The official website, analysis-tools.dev is based on this repository and adds rankings, user comments, and additional resources like videos for each tool.

What is Static Analysis?

Static program analysis is the analysis of computer software that is performed without actually executing programs — Wikipedia

The most important thing I have done as a programmer in recent years is to aggressively pursue static code analysis. Even more valuable than the hundreds of serious bugs I have prevented with it is the change in mindset about the way I view software reliability and code quality. — John Carmack (Creator of Doom)

Sponsors

This project would not be possible without the generous support of our sponsors.

If you also want to support this project, head over to our Github sponsors page.

Meaning of Symbols:

• :copyright: stands for proprietary software. All other tools are Open Source.
• :information_source: indicates that the community does not recommend to use this tool for new projects anymore. The icon links to the discussion issue.
• :warning: means that this tool was not updated for more than 1 year, or the repo was archived.

Pull requests are very welcome!
Also check out the sister project, awesome-dynamic-analysis.

Table of Contents

Programming Languages

Multiple languages

Other

{% for (tag, _) in others %} - {{ tag.name }} {%- endfor %}

Programming Languages

{%- for (language, linters) in linters %}

{{ language.name }}

{% for linter in linters -%} - {{linter.name }}{% if linter.discussion.is_some() %} :information_source:{% endif %}{% if linter.deprecated.is_some() %} :warning:{% endif %}{% if linter.license == “proprietary” %} :copyright:{% endif %} - {{ linter.description }} {% endfor %}

{%- endfor %}

Multiple languages

{% for linter in multi -%} - {{linter.name }}{% if linter.discussion.is_some() %} :information_source:{% endif %}{% if linter.deprecated.is_some() %} :warning:{% endif %}{% if linter.license == “proprietary” %} :copyright:{% endif %} - {{ linter.description }} {% endfor %}

Other

{% for (tag, others) in others %}

{{ tag.name }}

{% for other in others -%} - {{ other.name }}{% if other.discussion.is_some() %} :information_source:{% endif %}{% if other.deprecated.is_some() %} :warning:{% endif %}{% if other.license == “proprietary” %} :copyright:{% endif %} - {{ other.description }} {% endfor %}

{%- endfor %}

More Collections

• Clean code linters - A collection of linters in github collections
• Code Quality Checker Tools For PHP Projects - A collection of PHP linters in github collections
• go-tools - A collection of tools and libraries for working with Go code, including linters and static analysis
• linters - An introduction to static code analysis
• OWASP Source Code Analysis Tools - List of tools maintained by the Open Web Application Security Project
• php-static-analysis-tools - A reviewed list of useful PHP static analysis tools
• Wikipedia - A list of tools for static code analysis.

License

To the extent possible under law, Matthias Endler has waived all copyright and related or neighboring rights to this work. The underlying source code used to format and display that content is licensed under the MIT license.

Title image Designed by Freepik.