VisualCodeGrepper
Like
VCG is an automated code security review tool that handles C/C++, Java, C#, VB and PL/SQL. It has a few features that should hopefully make it useful to anyone conducting code security reviews, particularly where time is at a premium:
Cost / License
- Free
- Open Source
Platforms
- Windows
Features
- C++
- C-sharp
Tags
- Security Auditing
- source-code-analysis
VisualCodeGrepper News & Activities
Highlights All activities
Recent activities
braky added VisualCodeGrepper as alternative to Qodana
POX added VisualCodeGrepper as alternative to Opengrep
VisualCodeGrepper information
Developed by
Nick Dunn and John MurrayLicensing
Open Source (GPL-3.0) and Free product.Alternatives
16 alternatives listedSupported Languages
- English
AlternativeTo Category
DevelopmentGitHub repository
- 543 Stars
- 118 Forks
- 19 Open Issues
- Updated
No comments or reviews, maybe you want to be first?
Post comment/reviewWhat is VisualCodeGrepper?
VCG is an automated code security review tool that handles C/C++, Java, C#, VB and PL/SQL. It has a few features that should hopefully make it useful to anyone conducting code security reviews, particularly where time is at a premium:
- In addition to performing some more complex checks it also has a config file for each language that basically allows you to add any bad functions (or other text) that you want to search for
- It attempts to find a range of around 20 phrases within comments that can indicate broken code (“ToDo”, “FixMe”, “Kludge”, etc.)
- It provides a nice pie chart (for the entire codebase and for individual files) showing relative proportions of code, whitespace, comments, ‘ToDo’ style comments and bad code