Search awesome repositories

Reverse engineer anything with agents, from app behavior down to native binaries.

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

An extremely fast Python linter and code formatter, written in Rust.

ShellCheck, a static analysis tool for shell scripts

Local-first code intelligence graph for MCP and CLI. Builds a persistent map of your codebase so AI coding tools read only what matters, with benchmarked context reductions on reviews and large-repo workflows.

A PHP parser written in PHP

⚡A CLI tool for code structural search, lint and rewriting. Written in Rust

A tool to automatically fix PHP Coding Standards issues

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

A vulnerability scanner for container images and filesystems

Dockerfile linter, validate inline bash, written in Haskell

Vulnerability Static Analysis for Containers

Continuous Inspection

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

🐶 Automated code review tool integrated with any code analysis tools regardless of programming language

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

A static analysis security vulnerability scanner for Ruby on Rails applications

Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.

Tfsec is now part of Trivy

Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.

Static Analyzer for Solidity and Vyper

It's not just a linter that annoys you!

A static type analyzer for Python code

Codebase intelligence for TypeScript and JavaScript. Free static analysis of code and styles: unused code, duplication, circular deps, complexity hotspots, architecture boundaries, design-system drift. Optional paid runtime layer (Fallow Runtime): hot-path review and cold-path deletion evidence from real production traffic.

flake8 is a python tool that glues together pycodestyle, pyflakes, mccabe, and third-party plugins to check the style and quality of some python code.

Chat with (and visualize) your codebase

Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code.

GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and various tools.

Zero shot vulnerability discovery using LLMs

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.