static-analysis

Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.

Reverse engineer anything with agents, from app behavior down to native binaries.

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

Cheaper and better Greptile alternative runs on your own github actions.

Security-focused linter for Docker Compose files. Catches dangerous misconfigurations before they reach production. Grounded in OWASP and CIS Docker Benchmark.

Benchmark that rewards AI coding agents for smaller, simpler fixes

Portable pre-admission evidence for PostgreSQL extensions.