tiandiyixian Goto Github PK

sonar-gitlab-plugin

Add to each commit GitLab in a global commentary on the new anomalies added by this commit and add comment lines of modified files

sonar-java

:coffee: SonarJava : Java static analyzer for SonarQube & SonarLint

sonar-java-custom-rules

sonar自定义插件开发(基于阿里开发手册)

sonarqube-community-branch-plugin

A plugin that allows branch analysis and pull request decoration in the Community version of Sonarqube

sonarqube-ojaudit

SonarQube plugin for auditing Oracle JDeveloper projects using ojaudit

sourcerercc

Sourcerer's Code Clone project

sparrow

The Sparrow Static Analyzer

spoon

Spoon is a library to analyze, transform, rewrite, transpile Java source code (incl Java 9 & Java 10). It parses source files to build a well-designed AST with powerful analysis and transformation API. Made at Inria with :heart:, :beers: and :sparkles:.

spoon-examples

Examples on how to use the Spoon Java source code transformation library

static-code-analysis-report

How to Transform the Results from Findbugs, Checkstyle and PMD into a single HTML Report with XSLT 2.0 and Java?

static_analysis_rules

Summary of static analysis in Java and C/C++

staticanalysis

Static Analysis for PHP

summer

SummerWork

super-cloudops

SuperOps is One stop DevSecOps Cloud platform(saas) developed based on spring cloud. Its main function modules are: continuous delivery of CI/CD(Support distributed compilation, pptpvpn/OpenVPN/SSH tunnel deployment), certification center, monitoring center, configuration center, resource management center, scheduling center, elastic scaling, shell tools, various tool components (such as HBase / OSS operation and maintenance), document management, timely communication, lightweight risk control, private object storage, version control, etc

svf

Pointer Analysis and Program Dependence Analysis for C and C++ Programs

swan

A Swift Program Analysis Framework

symbiotic

Symbiotic is a tool for finding bugs in computer programs based on instrumentation, program slicing and KLEE

synode

Automatically Preventing Code Injection Attacks on Node.js

taintflow

TaintFlow, a framework for JavaScript dynamic information flow analysis.

taintgrind

A taint-tracking plugin for the Valgrind memory checking tool

tanalysis

Automatically exported from code.google.com/p/tanalysis

test

threadfix

ThreadFix is a software vulnerability management platform. This GitHub site is far out of date. Please go to www.threadfix.it for up-to-date information.

triton

Triton is a Dynamic Binary Analysis (DBA) framework. It provides internal components like a Dynamic Symbolic Execution (DSE) engine, a dynamic taint engine, AST representations of the x86, x86-64 and AArch64 Instructions Set Architecture (ISA), SMT simplification passes, an SMT solver interface and, the last but not least, Python bindings.

tutorials

The "REST With Spring" Course:

unifiedasatvisualizer

See warnings from multiple automated static analysis tools in one visualization.

vdiscover

A tool to predict vulnerability discovery of binary only programs

vera

A programmable tool for verification, analysis and transformation of C++ source code

violations-lib

Java library for parsing report files from static code analysis.

visualdfa

VisualDFA is a sophisticated educational tool for interactively visualizing data-flow analyses using Java/Jimple.