Apache Yetus is a collection of libraries and tools that enable contribution and release processes for software projects.
Cost / License
- Free
- Open Source (Apache-2.0)
Platforms
- Mac
- Linux
Apps similar to Cppcheck include SonarQube, which is open source with a free version. Other options are Shellcheck, Coverity Scan, VibeGuard and SlowQL. You can choose from more than 10 apps like Cppcheck for Linux, Windows, Mac, the web and self-hosting.
Apache Yetus is a collection of libraries and tools that enable contribution and release processes for software projects.
VCG is an automated code security review tool that handles C/C++, Java, C#, VB and PL/SQL. It has a few features that should hopefully make it useful to anyone conducting code security reviews, particularly where time is at a premium:

Qodana is a smart code quality platform by JetBrains best suited for working in teams. It can analyze code written in 60+ languages including Java, JavaScript, TypeScript, PHP, Kotlin, Python, Go, and C#.
Facebook Infer is a static analysis tool - if you give Infer some Objective-C, Java, or C code, it produces a list of potential bugs.
Code Buster reports dependency wiring, dead code, cycles, duplication, complexity, architecture-policy violations, feature flags, security and style heuristics, quality scores, and remediation plans.

Liverpool Data Research Associates (LDRA) is a provider of software analysis, test and requirements traceability tools for the Public and Private sectors and a pioneer in static and dynamic software analysis.

Parasoft’s C/C++test is the fully-integrated software testing solution for embedded safety-critical industries. Its automated software testing capabilities are also made for today’s high-velocity Agile DevOps environments.