Software application vulnerability correlation and management system that uses multiple SAST and DAST tools, as well as the results of manual code reviews. Īn open-source source code pattern matching and transformation.

As of version 3.2, this analyzer is included in Xcode. ).Īn open-source compiler that includes a static analyzer. Includes MISRA checker.Ī static code analysis tool suite that performs various analyses such as architecture checking, interface analyses, MISRA checking, and clone detection.Īn open-source software model checker for C programs based on lazy abstraction (follow-on project is CPAchecker. Built-in support may be extended with plug-ins.įinds all potential runtime errors and data races by abstract interpretation, can prove their absence, and can prove functional assertions tailored towards safety-critical C code (e.g.

Included is the 'precommit' module that is used to execute full and partial/patch CI builds that provides static analysis of code via other tools as part of a configurable report. Features automatic fixing of violations.Ī collection of build and release tools. This is a list of notable tools for static program analysis (program analysis is a synonym for code analysis).Ī tool to control occurrences of various entities or programming patterns in Ada code, used for checking coding standards, enforcement of safety related rules, and support for various manual inspections.

Java code comparison tool