Globstar

lastmod 2025-03-09created 2022-05-122 edits

Globstar is a fast, feature-rich, and open-source static analysis toolkit for writing and running code checkers. Based on tree-sitter.

Open-source static analysis toolkit

Features

• An open-source static analysis toolkit that lets developers and security engineers write code analysis checks (Checker) and run them as a single binary
• Uses powerful Tree-Sitter-based AST (abstract syntax tree) analysis, and checks can be written through an intuitive YAML or Go interface
  • Checks can be written with S-expressions, without a complex DSL
• Written in Go, so it runs fast even on large codebases
• CI/CD friendly: runs as a single binary with no extra installation
• Released under the MIT license**, allowing commercial use and modification

See also

• static analysis toolkit

Favorite site

• Github - DeepSourceCorp/globstar