> ## Documentation Index
> Fetch the complete documentation index at: https://trickest.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Static Code Analysis Tools

> Explore a collection of powerful and efficient tools in the Static Code Analysis category to enhance your productivity and security.

export const ToolCard = ({cardTitle, description, iframeUrl, href, category}) => <a href={href} style={{
  textDecoration: 'none'
}}>
    <div style={{
  background: 'linear-gradient(145deg, rgba(255, 255, 255, 0.03) 0%, rgba(255, 255, 255, 0.02) 100%)',
  borderRadius: '16px',
  overflow: 'hidden',
  transition: 'transform 0.4s cubic-bezier(0.215,0.61,0.355,1), box-shadow 0.3s ease',
  height: '35rem',
  display: 'flex',
  marginBottom: '16px',
  flexDirection: 'column',
  border: '1px solid rgba(255, 255, 255, 0.1)',
  boxShadow: '0px 8px 32px -2px rgba(0, 0, 0, 0.25), 0px 1px 2px 0px rgba(255, 255, 255, 0.07)',
  backdropFilter: 'blur(8px)',
  perspective: '1000px'
}} onMouseOver={e => {
  e.currentTarget.style.boxShadow = '0 8px 32px -2px rgba(0, 0, 0, 0.4)';
  e.currentTarget.style.transform = 'translateY(-4px) scale(1.02)';
}} onMouseOut={e => {
  e.currentTarget.style.boxShadow = '0px 8px 32px -2px rgba(0, 0, 0, 0.25), 0px 1px 2px 0px rgba(255, 255, 255, 0.07)';
  e.currentTarget.style.transform = 'translateY(0) scale(1)';
}}>
      <div style={{
  width: '100%',
  height: '300px',
  borderBottom: '1px solid rgba(255, 255, 255, 0.1)',
  position: 'relative'
}}>
        <div style={{
  position: 'absolute',
  top: 0,
  left: 0,
  right: 0,
  bottom: 0,
  background: 'linear-gradient(45deg, rgba(0, 163, 255, 0.1) 0%, rgba(0, 101, 255, 0.05) 100%)'
}} />
        <iframe src={iframeUrl} style={{
  width: '100%',
  height: '100%',
  border: 'none',
  position: 'relative',
  zIndex: 1,
  background: 'transparent'
}} scrolling="no" />
      </div>

      <div style={{
  padding: '1.5rem',
  display: 'flex',
  flexDirection: 'column',
  height: 'calc(100% - 300px)',
  gap: '8px'
}}>
        <h2 style={{
  color: '#ffffff',
  fontSize: '1.4rem',
  margin: 0,
  fontWeight: '600',
  lineHeight: '1.3',
  height: '1.8rem',
  overflow: 'hidden',
  textOverflow: 'ellipsis',
  display: '-webkit-box',
  WebkitLineClamp: 1,
  WebkitBoxOrient: 'vertical'
}}>
          {cardTitle}
        </h2>

        <p style={{
  color: 'rgba(163, 179, 188, 0.8)',
  fontSize: '1rem',
  margin: 0,
  lineHeight: '1.5',
  flex: '1 1 auto',
  overflowY: 'auto',
  paddingRight: '8px'
}}>
          {description}
        </p>
      </div>
    </div>
  </a>;

<CardGroup cols={2}>
  <ToolCard cardTitle="dumpsterdiver" description="DumpsterDiver is a tool, which can analyze big volumes of data in search of hardcoded secrets like keys (e.g. AWS Access Key, Azure Share Key or SSH keys) or passwords. Additionally, it allows creating a simple search rules with basic conditions (e.g. report only csv files including at least 10 email addresses). The main idea of this tool is to detect any potential secret leaks." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/da093a74-c0dc-4bb6-97f6-91936a548b7c.json" href="/docs/library/static-code-analysis/tools/dumpsterdiver" category="Static Code Analysis" />

  <ToolCard cardTitle="gitleaks" description="Gitleaks is a SAST tool for detecting hard coded secrets like passwords, API keys, and tokens in git repos. Gitleaks is an easy-to-use, all-in-one solution for finding secrets, past or present, in your code. Set leaks-exit-code to 0 for outputs to be saved." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/9ac7f733-dbf9-4cb0-b3df-5f26c6cde111.json" href="/docs/library/static-code-analysis/tools/gitleaks" category="Static Code Analysis" />

  <ToolCard cardTitle="javascript-deobfuscator" description="General purpose JavaScript deobfuscator" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/ca950eca-32a4-41a3-a837-3867cb591b40.json" href="/docs/library/static-code-analysis/tools/javascript-deobfuscator" category="Static Code Analysis" />

  <ToolCard cardTitle="leakos" description="Search leaks in a github org or in the responses of urls" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/1e3957ff-c512-40d2-8155-6c34679ff831.json" href="/docs/library/static-code-analysis/tools/leakos" category="Static Code Analysis" />

  <ToolCard cardTitle="noseyparker" description="Nosey Parker is a command-line program that finds secrets and sensitive information in textual data and Git history." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/769c8db3-b1b1-4178-bb8c-cc5c09120284.json" href="/docs/library/static-code-analysis/tools/noseyparker" category="Static Code Analysis" />

  <ToolCard cardTitle="reposcanner" description="Reposcanner is a python script to search through the commit history of Git repositories looking for interesting strings such as API keys." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/c7ad510d-5405-46f1-b17c-269af852e511.json" href="/docs/library/static-code-analysis/tools/reposcanner" category="Static Code Analysis" />

  <ToolCard cardTitle="retire-js" description="There is a plethora of JavaScript libraries for use on the Web and in Node.JS apps out there. This greatly simplifies development,but we need to stay up-to-date on security fixes. Using Components with Known Vulnerabilities is now a part of the OWASP Top 10 list of security risks and insecure libraries can pose a huge risk to your Web app. The goal of Retire.js is to help you detect the use of JS-library versions with known vulnerabilities." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/e52583b2-3e37-41f4-ad9a-3d17a17e9d80.json" href="/docs/library/static-code-analysis/tools/retire-js" category="Static Code Analysis" />

  <ToolCard cardTitle="rex" description="regexFinder gives the matches with a directory (or github repository) of the regexes, and saves the matches of found secrets in a json format." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/d8b06c54-6ec1-4224-9b52-32c8d43991c1.json" href="/docs/library/static-code-analysis/tools/rex" category="Static Code Analysis" />

  <ToolCard cardTitle="secretfinder" description="SecretFinder is a python script based on LinkFinder (version for burpsuite here), written to discover sensitive data like apikeys, accesstoken, authorizations, jwt,..etc in JavaScript files. It does so by using jsbeautifier for python in combination with a fairly large regular expression." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/1aae8426-c821-46b9-990a-d5692f63a738.json" href="/docs/library/static-code-analysis/tools/secretfinder" category="Static Code Analysis" />

  <ToolCard cardTitle="semgrep-scan" description="Lightweight static analysis for many languages. Find bug variants with patterns that look like source code." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/c5baf431-35d4-4a59-b0bb-94f9fa9018e2.json" href="/docs/library/static-code-analysis/tools/semgrep-scan" category="Static Code Analysis" />

  <ToolCard cardTitle="trufflehog" description="Find credentials all over the place" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/bb3dbaea-cf8d-45bf-bcc7-be12ff0f3676.json" href="/docs/library/static-code-analysis/tools/trufflehog" category="Static Code Analysis" />
</CardGroup>