zizmorby zizmorcore
Static analysis tool for GitHub Actions that finds security issues including template injection, credential leakage, excessive permissions, and impostor commits.
zizmor1.31.147.2k/90d updated 1d ago
creusot
creusot-rs/creusot
A deductive verifier for Rust that proves absence of panics, overflows, and assertion failures by translating code to the Why3 verification platform
- rust-lang
- verification
- proof
- formal-verification
- deductive-reasoning
- why3
- rust
- formal-methods
More in Static analysis
6.7k
jscpdby kucherenko
Copy/paste detector for source code that finds duplicated blocks across 220+ file formats
jscpd5.4.213.2k/90d updated today
3.4k
MIRAIby endorlabs
An abstract interpreter operating on Rust's mid-level intermediate representation (MIR)
v1.1.12updated 4mo ago
RAPxby safer-rust
A platform that helps Rust programmers develop and use advanced static analysis tools beyond those provided by the rustc compiler.
rapx0.7.61920/90d updated today
cargo-couplingby nwiizo
A Rust coupling analysis tool using Vlad Khononov's "Balancing Coupling in Software Design" framework
cargo-coupling0.4.0398/90d updated today
dupehoundby Rafaelpta
Duplicate-code detector that fingerprints function bodies (winnowing), so copies survive renaming. Repo slop score, duplication history chart, and a CI gate that points to the original function to reuse. Supports Rust and 11 other languages.
dupehound0.1.21.8k/90d updated 29d ago
code-busterby tool-bunker
A deterministic offline static analyzer for repository structure, dependencies, dead code, duplication, complexity, security, and maintainability across 18 languages.
code-buster0.11.022/90d updated 2d ago