GitHub repository: terrorizer1980/semgrep
Description: Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.