Semgrep

Static analysis for security bugs and code patterns, with an open-source core engine.