Semgrep

Semgrep is a powerful, developer-friendly static analysis tool. It scans codebases, searching for security vulnerabilities and coding errors. It also improves code quality and security by leveraging a comprehensive ruleset and easy integration into your development workflow.