sarif

GitHub Action for filtering Code Scanning alerts by path and id

☕️ Java library for working with SARIF files by Qodana team

A monorepo filtering workaround for GitHub Advanced Security Code Scanning using renaming of the scanning tool in an Actions workflow

SSC parser plugin for SARIF input files

A tool to map source code elements to IR elements.

The first AI-slop linter for the JVM.

PostgreSQL query-plan regression gates for CI

MethodAtlas is a CLI tool that scans test source trees for test methods and emits one structured record per discovered method — with optional AI-assisted security classification.

Maven plugin parsing SARIF files created by CodeQL used for SonarQube issueReporter.

SARIF java library to read and write SARIF

Read-only CI checks for Flyway and Liquibase production risks

This project targets to make a universal SARIF format converter

Read-only migration scanner for Spring AI 1.x to 2.x upgrades

Maven-first static analysis for Spring correctness: AST-based rules for proxy/transaction/async/scheduled/cache/web risks, with baselines, incremental cache, and JSON/HTML/SARIF reports.

AI-powered static analysis issue fixer - MCP server for SARIF reports

A library to generate statis analysis results in SARIF format.

Basic correlation of security analysis results

Code Quality Demo App 004 — Java/Spring Boot with intentional quality violations

Static analysis tool for AEM Cloud Service readiness: dependency graphs, OSGi service resolution, cloud-incompatible API detection, and reachability-based security prioritization.

Code metrics for Flix projects, counted by the compiler rather than by reading the text: definitions, effects, complexity and coupling from the typed AST, line kinds from the lexer. A flixw plugin; text, JSON, Markdown and SARIF output.