An open-source static analysis tool that identifies security vulnerabilities, bugs, and compliance issues in code across more than 30 programming languages. It includes a library of over 2800 rules for detecting common security issues and supports custom rule creation. The tool operates locally via command line, integrates with CI/CD pipelines, and focuses on single-file and single-function analysis. It requires no login and provides basic scanning capabilities suitable for individuals, small teams, and security auditors performing one-off scans.
