A static analysis tool for security
Les fonctionnalités principales de designsecurity/progpilot sont : Static Analysis Tools, Static Analysis, Static Analyzers, Static Code Analysis, Testing Tools.
Les alternatives open-source à designsecurity/progpilot incluent : psecio/parse — Parse: A Static Security Scanner. phan/phan — Phan is a static analyzer and type checker for PHP that identifies bugs and type incompatibilities without executing… floedesigntechnologies/phpcs-security-audit. presidentbeef/brakeman — Brakeman is a static analysis security tool and scanner specifically designed for Ruby on Rails source code. It… nccgroup/sobelow — Security-focused static analysis for the Phoenix Framework. securego/gosec — gosec is a static analysis security tool designed to scan Go source code for vulnerabilities and common coding flaws.…
Phan is a static analyzer and type checker for PHP that identifies bugs and type incompatibilities without executing the code. It serves as a quality gate for continuous integration pipelines and a tool for verifying type safety, specifically checking union types, generics, and array shapes. The project is distinguished by its use of a background daemon and Language Server Protocol implementation, which provide real-time diagnostics and navigation within editors. It also features a baseline-based suppression system that allows developers to record existing errors in a snapshot file to focus e
Security-focused static analysis for the Phoenix Framework
Brakeman is a static analysis security tool and scanner specifically designed for Ruby on Rails source code. It identifies common security vulnerabilities, such as injection and cross-site scripting, by analyzing the application codebase without executing the application. The tool functions as a security auditor that detects mass assignment risks and template vulnerabilities. It evaluates the final output of rendered views and identifies unrestricted assignment patterns that could allow unauthorized modification of model attributes. The system provides vulnerability management through the us