zizmorby zizmorcore
Static analysis tool for GitHub Actions that finds security issues including template injection, credential leakage, excessive permissions, and impostor commits.
zizmor1.31.147.2k/90d updated 1d ago

safer-rust/RAPx
A platform that helps Rust programmers develop and use advanced static analysis tools beyond those provided by the rustc compiler.
zizmorby zizmorcore
Static analysis tool for GitHub Actions that finds security issues including template injection, credential leakage, excessive permissions, and impostor commits.
zizmor1.31.147.2k/90d updated 1d ago
jscpdby kucherenko
Copy/paste detector for source code that finds duplicated blocks across 220+ file formats
jscpd5.4.213.2k/90d updated today
creusotby creusot-rs
A deductive verifier for Rust that proves absence of panics, overflows, and assertion failures by translating code to the Why3 verification platform
v0.14.0updated today
MIRAIby endorlabs
An abstract interpreter operating on Rust's mid-level intermediate representation (MIR)
v1.1.12updated 4mo ago
cargo-couplingby nwiizo
A Rust coupling analysis tool using Vlad Khononov's "Balancing Coupling in Software Design" framework
cargo-coupling0.4.0398/90d updated today
dupehoundby Rafaelpta
Duplicate-code detector that fingerprints function bodies (winnowing), so copies survive renaming. Repo slop score, duplication history chart, and a CI gate that points to the original function to reuse. Supports Rust and 11 other languages.
dupehound0.1.21.8k/90d updated 29d ago
code-busterby tool-bunker
A deterministic offline static analyzer for repository structure, dependencies, dead code, duplication, complexity, security, and maintainability across 18 languages.
code-buster0.11.022/90d updated 2d ago