Shellcheck
Cppcheck
Coverity Scan
SonarQube
PVS-Studio
Flawfinder
Splint
Semgrep
Checkmarx
SonarQube
Coverity Scan
Veracode
Appknox
GitLab
Netsparker
Acunetix Vulnerability Scanner
Shellcheck CheckmarxBased on our record, Shellcheck seems to be a lot more popular than Checkmarx. While we know about 29 links to Shellcheck, we've tracked only 2 mentions of Checkmarx. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.
> Are "Random shell scripts from the internet" categorically worse than "random docker images from the internet"? > With the shell script, you can literally read it in an ... ... https://shellcheck.net. Can't do that if all of the work is hidden in a Dockerfile's RUN statement. I have my team commit shell scripts in shell script files, and the Dockerfile just runs that shell script. - Source: Hacker News / 4 months ago
Nice script. It's... uhhh... Not shellcheck-clean. https://shellcheck.net/. - Source: Hacker News / 10 months ago
Another fairly valuable resource is https://shellcheck.net which I use a bit more often than ChatGPT if I need help scripting. Source: about 1 year ago
Always check your shell scripts at a site like http://shellcheck.net. Source: about 1 year ago
Once you get the command close to where you want it shellcheck.net is an amazing resource for fixing broken bash things. Paste your command line in and shellcheck will fix any syntax errors. Source: about 1 year ago
Automate security testing: Use tools such as OWASP ZAP, SonarQube, or Checkmarx to automate security testing. This will help you identify security issues early in the development process and reduce the risk of vulnerabilities being introduced into your code. - Source: dev.to / over 1 year ago
Application Security (AppSec) is the forte of Checkmarx, which is an award-winning AppSec Testing tool that integrates security policies into the DevOps workflow and ensures security across the application lifecycle. Checkmarx scans all your code and provides actionable insights for critical vulnerabilities. Checkmarx also offers developer-friendly AppSec training that makes the transition to DevSecOps more... - Source: dev.to / over 2 years ago
Cppcheck - Cppcheck is an analysis tool for C/C++ code. It detects the types of bugs that the compilers normally fail to detect. The goal is no false positives. CppCheckDownload cppcheck for free.
SonarQube - SonarQube, a core component of the Sonar solution, is an open source, self-managed tool that systematically helps developers and organizations deliver Clean Code.
Coverity Scan - Find and fix defects in your Java, C/C++ or C# open source project for free
Veracode - Veracode's application security software products are simpler and more scalable to increase the resiliency of your application infrastructure.
PVS-Studio - PVS-Studio is a useful piece of software for detecting problems in source code. The software examines program codes written in C, C++, and C# for any problems that might prohibit the code from functioning properly.
Appknox - Appknox is a cloud-based mobile app security solution to detect threats and vulnerabilities in the app.
