awesome-repositories.com
المدونة
awesome-repositories.com

اكتشف أفضل مستودعات المصادر المفتوحة باستخدام بحث مدعوم بالذكاء الاصطناعي.

استكشفعمليات بحث منسقةبدائل مفتوحة المصدربرمجيات ذاتية الاستضافةالمدونةخريطة الموقع
المشروعحولكيفية ترتيب النتائجالصحافةخادم MCP
قانونيالخصوصيةالشروط
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
·
microsoft avatar

microsoft/DevSkim

0
View on GitHub↗
995 نجوم·125 تفرعات·C#·MIT·2 مشاهدات

DevSkim

DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.

Features

  • Code Analysis and Metrics - Security linting and analysis for IDEs.
  • Code Analysis Platforms - Regex-based security analysis for various IDEs and languages.
  • Development Helpers - IDE extensions for inline security analysis.
  • Static Code Analysis - IDE and CLI linting for security best practices.
  • Security and Vulnerability Scanning - Regex-based security analysis for various IDEs.
  • Static Analysis - Provides IDE-integrated security analysis across multiple programming languages.

سجل النجوم

مخطط تاريخ النجوم لـ microsoft/devskimمخطط تاريخ النجوم لـ microsoft/devskim

بحث بالذكاء الاصطناعي

استكشف المزيد من المستودعات الرائعة

صف ما تحتاجه بلغة بسيطة — وسيقوم الذكاء الاصطناعي بترتيب آلاف المشاريع مفتوحة المصدر المنسقة حسب الصلة.

Start searching with AI

الأسئلة الشائعة

ما هي وظيفة microsoft/devskim؟

DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.

ما هي الميزات الرئيسية لـ microsoft/devskim؟

الميزات الرئيسية لـ microsoft/devskim هي: Code Analysis and Metrics, Code Analysis Platforms, Development Helpers, Static Code Analysis, Security and Vulnerability Scanning, Static Analysis.

ما هي البدائل مفتوحة المصدر لـ microsoft/devskim؟

تشمل البدائل مفتوحة المصدر لـ microsoft/devskim: bearer/bearer — Bearer is a static analysis security testing tool and privacy compliance auditor. It identifies security… securego/gosec — gosec is a static analysis security tool designed to scan Go source code for vulnerabilities and common coding flaws.… sonarsource/sonarqube — SonarQube is a static code analysis platform used to scan source code and infrastructure scripts across multiple… github/codeql — CodeQL is a semantic code analysis engine and vulnerability scanning tool that treats source code as data. It utilizes… ajinabraham/nodejsscan — nodejsscan is a static analysis security tool and vulnerability detection engine designed to scan Node.js source code… dotnet/roslyn-analyzers — The Microsoft.CodeAnalysis.NetAnalyzers package moved into the dotnet/sdk repository for further development and…

بدائل مفتوحة المصدر لـ DevSkim

مشاريع مفتوحة المصدر مشابهة، مرتبة حسب عدد الميزات المشتركة مع DevSkim.
  • bearer/bearerالصورة الرمزية لـ Bearer

    Bearer/bearer

    2,566عرض على GitHub↗

    Bearer is a static analysis security testing tool and privacy compliance auditor. It identifies security vulnerabilities, hard-coded secrets, and privacy risks in source code through static analysis and data flow tracing. The tool distinguishes itself by tracking the movement of sensitive data through code to identify leaks and by mapping personal and health-related information flows to generate evidence for privacy impact assessments. It also provides differential scanning for pull requests and uses fingerprint-based suppression to exclude known false positives from reports. The platform co

    Goappseccode-qualitycompliance
    عرض على GitHub↗2,566
  • securego/gosecالصورة الرمزية لـ securego

    securego/gosec

    8,866عرض على GitHub↗

    gosec is a static analysis security tool designed to scan Go source code for vulnerabilities and common coding flaws. It functions as a security analyzer that inspects the abstract syntax tree to identify insecure function calls, API usage, and potential security risks. The tool distinguishes itself by mapping detected vulnerabilities to Common Weakness Enumeration identifiers for standardized reporting and integrating with external AI models to suggest code fixes for identified issues. Its capabilities cover the detection of injection vulnerabilities, hardcoded credentials, weak cryptograph

    Go
    عرض على GitHub↗8,866
  • github/codeqlالصورة الرمزية لـ github

    github/codeql

    9,252عرض على GitHub↗

    CodeQL is a semantic code analysis engine and vulnerability scanning tool that treats source code as data. It utilizes a static analysis query language to define complex patterns and security vulnerabilities within a code graph database. The system represents source code as a relational database, enabling the execution of structural queries and data flow analysis. This approach allows for the detection of security flaws and coding errors across large-scale repositories. The tool provides capabilities for automated code auditing, static analysis security testing, and custom vulnerability dete

    CodeQLcodeqlgithub-advanced-securitygithub-security-lab
    عرض على GitHub↗9,252
  • sonarsource/sonarqubeالصورة الرمزية لـ SonarSource

    SonarSource/sonarqube

    10,259عرض على GitHub↗

    SonarQube is a static code analysis platform used to scan source code and infrastructure scripts across multiple languages. It detects bugs, security vulnerabilities, and maintainability issues to ensure software meets reliability and security standards. The platform implements automated quality gates for continuous integration and delivery pipelines, verifying code against defined rules during merge or pull requests. It also integrates directly with code editors to provide real-time analysis results and quick-fix guidance during development. The system covers broad functional areas includin

    Javacode-qualitysonarqubestatic-analysis
    عرض على GitHub↗10,259
    • عرض جميع البدائل الـ 30 لـ DevSkim→