The best open source alternative to SonarQube is Codacy. It's not free, so if you're looking for a free alternative, you could try Codacy or Shellcheck. If that doesn't suit you, our users have ranked more than 25 alternatives to SonarQube and 16 is open source so hopefully you can find a suitable replacement. Other interesting open source alternatives to SonarQube are Repowise, VibeGuard, SlowQL and Semgrep.
VCG is an automated code security review tool that handles C/C++, Java, C#, VB and PL/SQL. It has a few features that should hopefully make it useful to anyone conducting code security reviews, particularly where time is at a premium:
Exlint is a an open source project that enables developers to centralize their open source coding standards and policies, so that configuring repositories becomes as easy as typing one command.
Israel
GitHub Launch Checklist audits a repository before it is published or promoted. It runs ten readiness checks - repository name, description, topics, README, license, demo link, installation section, contributing guide, issue templates and social preview - and reports a score...
