SonarQube

SonarQube offers code quality and security analysis for teams tracking duplication and defect risks in a project.

Visit SonarQube official site

What it does

Quality and security issues appear in project checks.

When to use it

When tracking duplication and defect risks in a project, review quality gates against new code.

Semgrep

Semgrep offers code rule scanning and security analysis for teams finding risky patterns before code review.

  • security
  • scanning

Web Utility

Snyk

Snyk offers dependency and code security scanning for teams checking known risks in dependencies.

  • security
  • scanning

Web Utility

TruffleHog

TruffleHog offers secret detection for repositories and storage for teams locating exposed API keys.

  • security
  • scanning

Web Utility