Awesome GitHub RepositoriesCode Analysis Query Languages

CodeQL is a semantic code analysis engine and vulnerability scanning tool that treats source code as data. It utilizes a static analysis query language to define complex patterns and security vulnerabilities within a code graph database. The system represents source code as a relational database, enabling the execution of structural queries and data flow analysis. This approach allows for the detection of security flaws and coding errors across large-scale repositories. The tool provides capabilities for automated code auditing, static analysis security testing, and custom vulnerability dete

Bytehound es un perfilador de memoria para Linux que utiliza un asignador global personalizado para interceptar solicitudes de memoria y rastrear asignaciones y desasignaciones. Registra trazas completas de la pila de llamadas para cada operación de memoria para mapear las asignaciones de vuelta a su código fuente original. El proyecto cuenta con un sistema de perfilado de memoria remoto que transmite datos de captura a través de sockets de red a una máquina separada, minimizando la sobrecarga de recursos en el sistema de destino. El análisis es compatible con un lenguaje de consulta específico del dominio utilizado para automatizar la detección de patrones y anomalías de memoria. La herramienta cubre el análisis de asignación de heap para identificar fugas y fragmentación, así como la introspección en tiempo de ejecución para monitorear y ajustar los estados del asignador. Los datos pueden exportarse y renderizarse a través de un visualizador basado en web para proporcionar representaciones gráficas del uso de la memoria y los patrones de asignación.

GritQL is an AST-based code transformation engine and structural search tool. It uses a declarative query language to identify and rewrite source code patterns across multiple programming languages by matching abstract syntax tree nodes rather than literal text. The system functions as an automated refactoring framework for large-scale migrations and API updates. It distinguishes itself by utilizing sequential transformation pipelines and reusable blueprints that can be synced between local environments and remote repositories. The tool covers a broad range of capabilities including static a

nvim-treesitter-context is a Neovim editor extension that provides structural awareness of source files by displaying sticky headers of surrounding code blocks. It utilizes Tree-sitter queries to identify parent functions and classes, keeping them visible at the top of the editor window while scrolling. The tool allows for language rule customization, enabling the definition of specific structural queries to modify how context is detected for different programming languages. Users can also adjust the visual appearance of the context window through custom highlight groups. Beyond visual orien