Semgrep

Code security platform for static analysis and application security testing, with support for finding vulnerabilities, secrets, and insecure patterns in code.