Skip to content

Commit f579243

Browse files
author
Analysis Tools Bot
committed
Commit list
1 parent 1135140 commit f579243

2 files changed

Lines changed: 118 additions & 46 deletions

File tree

README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1585,7 +1585,7 @@ It supports multiple languages and is designed to be extensible, allowing you to
15851585

15861586
- [Similarity Tester](https://dickgrune.com/Programs/similarity_tester/) — A tool that finds similarities between or within files to support you encountering DRY principle violations.
15871587

1588-
- [Snyk Code](https://snyk.io) :copyright: — Snyk Code finds security vulnerabilities based on AI. Its speed of analysis allow us to analyse your code in real time and deliver results when you hit the save button in your IDE. Supported languages are Java, JavaScript, Python, PHP, C#, Go and TypeScript. Integrations with GitHub, BitBucket and Gitlab. It is free to try and part of the Snyk platform also covering SCA, containers and IaC.
1588+
- [Snyk Code](https://snyk.io) :copyright: — Snyk Code finds security vulnerabilities based on AI. Its speed of analysis allow us to analyse your code in real time and deliver results when you hit the save button in your IDE. Supported languages are Java, JavaScript, Python, PHP, C#, Go and TypeScript. Integrations with GitHub, BitBucket and Gitlab. It is free to try and part of the Snyk platform also covering SCA, containers and IaC.
15891589

15901590
- [SonarQube Cloud](https://sonarcloud.io) :copyright: — SonarQube Cloud enables your team to deliver clean code consistently and efficiently with a code review tool that easily integrates into the cloud DevOps platforms and extend your CI/CD workflow. SonarQube Cloud provides a free plan.
15911591

data/api/tools.json

Lines changed: 117 additions & 45 deletions
Original file line numberDiff line numberDiff line change
@@ -489,8 +489,11 @@
489489
],
490490
"homepage": "https://npo-echelon.ru/en/solutions/appchecker.php",
491491
"source": null,
492-
"pricing": null,
493-
"plans": null,
492+
"pricing": "https://npo-echelon.ru/en/solutions/appchecker.php",
493+
"plans": {
494+
"free": false,
495+
"oss": false
496+
},
494497
"description": "Static analysis for C/C++/C#, PHP and Java.",
495498
"discussion": null,
496499
"deprecated": null,
@@ -529,8 +532,11 @@
529532
],
530533
"homepage": "https://www.ptsecurity.com/ww-en/products/ai",
531534
"source": null,
532-
"pricing": null,
533-
"plans": null,
535+
"pricing": "https://global.ptsecurity.com/en/products/ai/",
536+
"plans": {
537+
"free": false,
538+
"oss": false
539+
},
534540
"description": "Commercial Static Code Analysis which generates exploits to verify vulnerabilities.",
535541
"discussion": null,
536542
"deprecated": null,
@@ -707,8 +713,11 @@
707713
],
708714
"homepage": "https://www.absint.com/astree/index.htm",
709715
"source": null,
710-
"pricing": null,
711-
"plans": null,
716+
"pricing": "https://www.absint.com/astree/contact.htm",
717+
"plans": {
718+
"free": false,
719+
"oss": false
720+
},
712721
"description": "Astrée automatically proves the absence of runtime errors and invalid con­current behavior in C/C++ applications. It is sound for floating-point computations, very fast, and exceptionally precise. The analyzer also checks for MISRA/CERT/CWE/Adaptive Autosar coding rules and supports qualification for ISO 26262, DO-178C level A, and other safety standards. Jenkins and Eclipse plugins are available.",
713722
"discussion": null,
714723
"deprecated": null,
@@ -1348,8 +1357,11 @@
13481357
],
13491358
"homepage": "https://www.blackducksoftware.com",
13501359
"source": null,
1351-
"pricing": null,
1352-
"plans": null,
1360+
"pricing": "https://www.synopsys.com/software-integrity/contact-sales.html",
1361+
"plans": {
1362+
"free": false,
1363+
"oss": false
1364+
},
13531365
"description": "Tool to analyze source code and binaries for reusable code, necessary licenses and potential security aspects.",
13541366
"discussion": null,
13551367
"deprecated": null,
@@ -2368,8 +2380,11 @@
23682380
],
23692381
"homepage": "https://www.checkmarx.com/products/static-application-security-testing",
23702382
"source": null,
2371-
"pricing": null,
2372-
"plans": null,
2383+
"pricing": "https://checkmarx.com/packaging/",
2384+
"plans": {
2385+
"free": false,
2386+
"oss": false
2387+
},
23732388
"description": "Commercial Static Code Analysis which doesn't require pre-compilation.",
23742389
"discussion": null,
23752390
"deprecated": null,
@@ -2999,7 +3014,10 @@
29993014
"homepage": "https://spinroot.com/cobra",
30003015
"source": null,
30013016
"pricing": null,
3002-
"plans": null,
3017+
"plans": {
3018+
"free": true,
3019+
"oss": true
3020+
},
30033021
"description": "Structural source code analyzer by NASA's Jet Propulsion Laboratory.",
30043022
"discussion": null,
30053023
"deprecated": null,
@@ -3150,8 +3168,11 @@
31503168
],
31513169
"homepage": "https://www.code-intelligence.com",
31523170
"source": null,
3153-
"pricing": null,
3154-
"plans": null,
3171+
"pricing": "https://www.code-intelligence.com/product-pricing",
3172+
"plans": {
3173+
"free": false,
3174+
"oss": true
3175+
},
31553176
"description": "CI/CD-agnostic DevSecOps platform which combines industry-leading fuzzing engines for finding bugs and visualizing code coverage",
31563177
"discussion": null,
31573178
"deprecated": null,
@@ -3191,8 +3212,11 @@
31913212
],
31923213
"homepage": "https://www.codeac.io/?ref=awesome-static-analysis",
31933214
"source": null,
3194-
"pricing": null,
3195-
"plans": null,
3215+
"pricing": "https://www.codeac.io/pricing.html",
3216+
"plans": {
3217+
"free": true,
3218+
"oss": true
3219+
},
31963220
"description": "Automated code review tool integrates with GitHub, Bitbucket and GitLab (even self-hosted). Available for JavaScript, TypeScript, Python, Ruby, Go, PHP, Java, Docker, and more. (open-source free)",
31973221
"discussion": null,
31983222
"deprecated": null,
@@ -3422,8 +3446,11 @@
34223446
],
34233447
"homepage": "https://www.getcodeflow.com",
34243448
"source": null,
3425-
"pricing": null,
3426-
"plans": null,
3449+
"pricing": "https://www.getcodeflow.com",
3450+
"plans": {
3451+
"free": false,
3452+
"oss": true
3453+
},
34273454
"description": "Automated code analysis tool to deal with technical depth. Integrates with Bitbucket and Gitlab. (free for Open Source Projects)",
34283455
"discussion": null,
34293456
"deprecated": null,
@@ -3450,8 +3477,11 @@
34503477
],
34513478
"homepage": "https://submain.com/products/codeit.right.aspx",
34523479
"source": null,
3453-
"pricing": null,
3454-
"plans": null,
3480+
"pricing": "https://submain.com/CodeIt.Right/editions/",
3481+
"plans": {
3482+
"free": false,
3483+
"oss": false
3484+
},
34553485
"description": "CodeIt.Right™ provides a fast, automated way to ensure that your source code adheres to (your) predefined design and style guidelines as well as best coding practices.",
34563486
"discussion": null,
34573487
"deprecated": null,
@@ -3883,8 +3913,11 @@
38833913
],
38843914
"homepage": "https://codesecure.com/our-products/codesonar/",
38853915
"source": null,
3886-
"pricing": null,
3887-
"plans": null,
3916+
"pricing": "https://codesecure.com/trial-request/",
3917+
"plans": {
3918+
"free": false,
3919+
"oss": false
3920+
},
38883921
"description": "Advanced, whole program, deep path, static analysis of C, C++, Java and C# with easy-to-understand explanations and code and path visualization.",
38893922
"discussion": null,
38903923
"deprecated": null,
@@ -3950,8 +3983,11 @@
39503983
],
39513984
"homepage": "https://www.codety.io",
39523985
"source": "https://github.com/codetyio/codety-scanner",
3953-
"pricing": null,
3954-
"plans": null,
3986+
"pricing": "https://www.codety.io",
3987+
"plans": {
3988+
"free": true,
3989+
"oss": true
3990+
},
39553991
"description": "Codety Scanner is a comprehensive source code scanner that embeds 5000+ static code analysis rules, which aim to detect code issues for 20+ programming languages and IaC tools.",
39563992
"discussion": null,
39573993
"deprecated": null,
@@ -4270,8 +4306,11 @@
42704306
],
42714307
"homepage": "https://corgea.com/",
42724308
"source": null,
4273-
"pricing": null,
4274-
"plans": null,
4309+
"pricing": "https://corgea.com/pricing",
4310+
"plans": {
4311+
"free": true,
4312+
"oss": false
4313+
},
42754314
"description": "Corgea is an AI-powered SAST scanner that helps developers find and fix insecure code. It finds business logic flaws, broken authentication, API vulnerabilities, and more with little false positives. Additionally, it automatically writes security fixes for them to approve. Corgea integrates with GitHub, GitLab, Azure DevOps, IDEs and CLI. It is free to try it.",
42764315
"discussion": null,
42774316
"deprecated": null,
@@ -4348,8 +4387,11 @@
43484387
],
43494388
"homepage": "https://www.synopsys.com/software-integrity/security-testing/static-analysis-sast.html",
43504389
"source": null,
4351-
"pricing": null,
4352-
"plans": null,
4390+
"pricing": "https://www.synopsys.com/software-integrity/contact-sales.html",
4391+
"plans": {
4392+
"free": false,
4393+
"oss": true
4394+
},
43534395
"description": "Synopsys Coverity supports 20 languages and over 70 frameworks including Ruby on rails, Scala, PHP, Python, JavaScript, TypeScript, Java, Fortran, C, C++, C#, VB.NET.",
43544396
"discussion": null,
43554397
"deprecated": null,
@@ -5281,8 +5323,11 @@
52815323
],
52825324
"homepage": "https://www.deleaker.com/",
52835325
"source": null,
5284-
"pricing": null,
5285-
"plans": null,
5326+
"pricing": "https://www.deleaker.com/order.html",
5327+
"plans": {
5328+
"free": false,
5329+
"oss": false
5330+
},
52865331
"description": "Deleaker is a memory leak detection tool for C++, .NET, and Delphi, integrating with Visual Studio, Qt Creator, and RAD Studio or running as a standalone application. It helps developers find and fix memory, GDI, and handle leaks efficiently.",
52875332
"discussion": null,
52885333
"deprecated": null,
@@ -7593,8 +7638,11 @@
75937638
],
75947639
"homepage": "https://www.microfocus.com/en-us/cyberres/application-security/static-code-analyzer",
75957640
"source": null,
7596-
"pricing": null,
7597-
"plans": null,
7641+
"pricing": "https://www.opentext.com/products/fortify-on-demand/trial",
7642+
"plans": {
7643+
"free": false,
7644+
"oss": false
7645+
},
75987646
"description": "A commercial static analysis platform that supports the scanning of C/C++, C#, VB.NET, VB6, ABAP/BSP, ActionScript, Apex, ASP.NET, Classic ASP, VB Script, Cobol, ColdFusion, HTML, Java, JS, JSP, MXML/Flex, Objective-C, PHP, PL/SQL, T-SQL, Python (2.6, 2.7), Ruby (1.9.3), Swift, Scala, VB, and XML.",
75997647
"discussion": null,
76007648
"deprecated": null,
@@ -9105,8 +9153,11 @@
91059153
],
91069154
"homepage": "https://www.hcltechsw.com/products/appscan",
91079155
"source": null,
9108-
"pricing": null,
9109-
"plans": null,
9156+
"pricing": "http://www.hcl-software.com/appscan/contact-us",
9157+
"plans": {
9158+
"free": false,
9159+
"oss": false
9160+
},
91109161
"description": "Commercial Static Code Analysis.",
91119162
"discussion": null,
91129163
"deprecated": null,
@@ -10326,7 +10377,10 @@
1032610377
"homepage": "https://www.kiuwan.com/code-security-sast",
1032710378
"source": null,
1032810379
"pricing": "https://www.kiuwan.com/pricing",
10329-
"plans": null,
10380+
"plans": {
10381+
"free": false,
10382+
"oss": false
10383+
},
1033010384
"description": "Identify and remediate cyber threats in a blazingly fast, collaborative environment, with seamless integration in your SDLC. Python, C\\C++, Java, C#, PHP and more.",
1033110385
"discussion": null,
1033210386
"deprecated": null,
@@ -10420,7 +10474,10 @@
1042010474
"homepage": "https://www.perforce.com/products/klocwork",
1042110475
"source": null,
1042210476
"pricing": "https://www.perforce.com/purchase",
10423-
"plans": null,
10477+
"plans": {
10478+
"free": false,
10479+
"oss": false
10480+
},
1042410481
"description": "Quality and Security Static analysis for C/C++, Java and C#.",
1042510482
"discussion": null,
1042610483
"deprecated": null,
@@ -10901,7 +10958,10 @@
1090110958
"homepage": "https://ldra.com",
1090210959
"source": null,
1090310960
"pricing": "https://ldra.com/register/",
10904-
"plans": null,
10961+
"plans": {
10962+
"free": false,
10963+
"oss": false
10964+
},
1090510965
"description": "A tool suite including static analysis (TBVISION) to various standards including MISRA C & C++, JSF++ AV, CWE, CERT C, CERT C++ & Custom Rules.",
1090610966
"discussion": null,
1090710967
"deprecated": null,
@@ -12986,8 +13046,11 @@
1298613046
],
1298713047
"homepage": "https://www.parasoft.com/",
1298813048
"source": null,
12989-
"pricing": null,
12990-
"plans": null,
13049+
"pricing": "https://www.parasoft.com/contact/",
13050+
"plans": {
13051+
"free": false,
13052+
"oss": false
13053+
},
1299113054
"description": "Automated Software Testing Solutions for unit-, API-, and web UI testing. Complies with MISRA, OWASP, and others.",
1299213055
"discussion": null,
1299313056
"deprecated": null,
@@ -17924,9 +17987,12 @@
1792417987
],
1792517988
"homepage": "https://snyk.io",
1792617989
"source": null,
17927-
"pricing": null,
17928-
"plans": null,
17929-
"description": "Snyk Code finds security vulnerabilities based on AI. Its speed of analysis allow us to analyse your code in real time and deliver results when you hit the save button in your IDE. Supported languages are Java, JavaScript, Python, PHP, C#, Go and TypeScript. Integrations with GitHub, BitBucket and Gitlab. It is free to try and part of the Snyk platform also covering SCA, containers and IaC.",
17990+
"pricing": "https://snyk.io/plans/",
17991+
"plans": {
17992+
"free": true,
17993+
"oss": true
17994+
},
17995+
"description": "Snyk Code finds security vulnerabilities based on AI. Its speed of analysis allow us to analyse your code in real time and deliver results when you hit the save button in your IDE. Supported languages are Java, JavaScript, Python, PHP, C#, Go and TypeScript. Integrations with GitHub, BitBucket and Gitlab. It is free to try and part of the Snyk platform also covering SCA, containers and IaC.",
1793017996
"discussion": null,
1793117997
"deprecated": null,
1793217998
"resources": [
@@ -19499,8 +19565,11 @@
1949919565
],
1950019566
"homepage": "https://www.synopsys.com/software-integrity/security-testing/static-analysis-sast.html",
1950119567
"source": null,
19502-
"pricing": null,
19503-
"plans": null,
19568+
"pricing": "https://www.blackduck.com/static-analysis-tools-sast/coverity/get-pricing.html",
19569+
"plans": {
19570+
"free": false,
19571+
"oss": true
19572+
},
1950419573
"description": "A commercial static analysis platform that allows for scanning of multiple languages (C/C++, Android, C#, Java, JS, PHP, Python, Node.JS, Ruby, Fortran, and Swift).",
1950519574
"discussion": null,
1950619575
"deprecated": null,
@@ -20891,8 +20960,11 @@
2089120960
],
2089220961
"homepage": "https://www.veracode.com/security/static-code-analysis",
2089320962
"source": null,
20894-
"pricing": null,
20895-
"plans": null,
20963+
"pricing": "https://info.veracode.com/request-quote.html",
20964+
"plans": {
20965+
"free": false,
20966+
"oss": false
20967+
},
2089620968
"description": "Find flaws in binaries and bytecode without requiring source. Support all major programming languages: Java, .NET, JavaScript, Swift, Objective-C, C, C++ and more.",
2089720969
"discussion": null,
2089820970
"deprecated": null,

0 commit comments

Comments
 (0)