GitHub repository: marcostolosa/semgrep
Description: Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.