Coverity Scan Alternatives
Coverity Scan is described as 'Static Analysis allows to find and fix defects in your Java, C/C++ or C# open source project for free' and is an app in the development category. There are more than 10 alternatives to Coverity Scan for a variety of platforms, including Windows, Linux, Online / Web-based, Mac and Xcode. The best alternative is SonarQube, which is both free and Open Source. Other great apps like Coverity Scan are Cppcheck, PVS-Studio, Shellcheck and Flawfinder.
SonarQube is an open source quality management platform, dedicated to continuously analyze and measure source code quality, from the portfolio to the method. Static code analysis is available in the "Community Edition" (free / open source) for:
Cppcheck is an static analysis tool for C/C++ code. Unlike C/C++ compilers and many other analysis tools it does not detect syntax errors in the code. Cppcheck primarily detects the types of bugs that the compilers normally do not detect.
- Paid • Proprietary
10 alternatives to PVS-Studio- Windows
- Linux
- MinGW
- GCC C Preprocessor (cpp)
- Microsoft Visual Studio
- clang
PVS-Studio is a static analyzer that detects errors in source code of C, C++ and C# applications. The PVS-Studio tool is intended for developers of contemporary applications and it integrates into the Visual Studio 2005/2008/2010/2012/2013 environment.
Features
- Free • Open Source
15 alternatives to Shellcheck- Online
- GNU Emacs
- Vim
- Sublime Text
- Atom
- Code - OSS (vscode)
- Visual Studio Code
A simple tool for finding bugs in shell scripts.
Flawfinder examines source code and reports possible security weaknesses (``flaws'') sorted by risk level. It's very useful for quickly finding and removing at least some potential security problems before a program is widely released to the public.
This app doesn't have any features at the moment.The Clang Static Analyzer is a source code analysis tool that finds bugs in C, C++, and Objective-C programs.
Features
Splint is a tool for statically checking C programs for security vulnerabilities and coding mistakes. With minimal effort, Splint can be used as a better lint. If additional effort is invested adding annotations to programs, Splint can perform stronger checking than can be done...
DiscontinuedLast version 3.1.2 is from August 2007.
lgtm.com is a platform for code analytics. It's free to use for open source software; results for over 55k projects are readily available (add your own!), has automatic code review pull request integration (GitHub, Bitbucket, GitLab), and much more.
Facebook Infer is a static analysis tool - if you give Infer some Objective-C, Java, or C code, it produces a list of potential bugs.
EDoC++ is a C++ source analysis tool designed to identify problems associated with the use of exceptions in C++ code. Additionally EDoC++ can be used to generate detailed documentation
Features