Top SAST GitHub Repositories & Tools (2026)

The most popular Kubernetes Operator for PostgreSQL.

Plugin for JADX to integrate MCP server

Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/repo-map/

JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.

The Open Source Computer Aided Dispatch (CAD), Personnel, Shift Management, Automatic Vehicle Location (AVL) and Emergency Management Platform that powers Resgrid.com

The open source taint analysis engine for the AI era. A formal dataflow analysis tool you can customize and self-host, built so AI agents drive your application security analysis without burning tokens on every scan. AI-ready open source alternative to Semgrep Pro and CodeQL.

A Kopia-native Kubernetes backup operator written in Rust