GitHub repository: sk8tz/semgrep
Description: Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.