Source code analysis tools, also known as Static Application Security Testing (SAST) Tools.
| Repository | Stars | Forks | Last Updated | Description |
|---|---|---|---|---|
| stretchr/testify | 26k | 2k | 2026-08-05T17:06:22Z | . |
| golangci/golangci-lint | 19k | 2k | 2026-08-06T00:25:32Z | – A fast Go linters runner. It runs linters in parallel, uses caching, supports yaml config, has integrations with all major IDE and has dozens of linters included. |
| dominikh/go-tools | 7k | 417 | 2026-08-04T15:24:53Z | staticcheck is go vet on steroids, applying a ton of static analysis checks you might be used to from tools like ReSharper for C#. |
| mgechev/revive | 6k | 319 | 2026-08-05T08:09:20Z | – ~6x faster, stricter, configurable, extensible, and beautiful drop-in replacement for golint. |
| kisielk/errcheck | 3k | 146 | 2026-07-29T15:15:00Z | Errcheck is a program for checking for unchecked errors in Go programs. |
| jfeliu007/goplantuml | 2k | 175 | 2026-08-04T09:50:56Z | Library and CLI that generates text plantump class diagram containing information about structures and interfaces with the relationship among them. |
| go-critic/go-critic | 2k | 135 | 2026-08-03T13:10:07Z | source code linter that brings checks that are currently not implemented in other linters. |
| segmentio/golines | 1k | 78 | 2026-08-02T16:29:31Z | Formatter that automatically shortens long lines in Go code. |
| daveshanley/vacuum | 1k | 84 | 2026-07-30T14:44:14Z | An ultra-super-fast, lightweight OpenAPI linter and quality checking tool. |
| roblaszczak/go-cleanarch | 985 | 49 | 2026-07-24T07:20:15Z | go-cleanarch was created to validate Clean Architecture rules, like a The Dependency Rule and interaction between packages in your Go projects. |
| z7zmey/php-parser | 960 | 63 | 2026-07-20T09:44:08Z | A Parser for PHP written in Go. |
| yuroyoro/goast-viewer | 793 | 65 | 2026-05-12T23:59:43Z | Web based Golang AST visualizer. |
| psampaz/go-mod-outdated | 670 | 30 | 2026-07-21T06:14:23Z | An easy way to find outdated dependencies of your Go projects. |
| sqs/goreturns | 537 | 53 | 2026-07-17T14:01:23Z | Adds zero-value return statements to match the func return types. |
| amit-davidson/Chronos | 440 | 10 | 2026-07-28T13:14:16Z | Detects race conditions statically |
| preslavmihaylov/todocheck | 438 | 46 | 2026-08-02T03:13:04Z | Static code analyser which links TODO comments in code with issues in your issue tracker. |
| mdempsky/unconvert | 387 | 26 | 2026-07-21T05:13:08Z | Remove unnecessary type conversions from Go source. |
| tomarrell/wrapcheck | 373 | 33 | 2026-07-28T10:59:06Z | A linter to check that errors from external packages are wrapped. |
| mibk/dupl | 368 | 22 | 2026-07-21T05:47:09Z | Tool for code clone detection. |
| augmentable-dev/tickgit | 324 | 18 | 2026-06-05T22:58:14Z | CLI and go package for surfacing code comment TODOs (in any language) and applying a git blameto identify the author. |
| shurcooL/gostatus | 245 | 10 | 2025-08-05T10:32:06Z | Command line tool, shows the status of repositories that contain Go packages. |
| bradleyfalzon/apicompat | 182 | 5 | 2026-04-07T13:59:30Z | Checks recent changes to a Go project for backwards incompatible changes. |
| ast-metrics/ast-metrics | 151 | 16 | 2026-08-04T05:17:19Z | Static code analyzer for Go and other languages: complexity, coupling, cohesion and maintainability metrics, with HTML, JSON, Markdown and SARIF reports. |
| qiniu/checkstyle | 130 | 17 | 2026-02-23T14:36:51Z | checkstyle is a style check tool like java checkstyle. This tool inspired by java checkstyle, golint. The style referred to some points in Go Code Review Comments. |
| asty-org/asty | 88 | 5 | 2026-07-05T12:32:03Z | Converts golang AST to JSON and JSON to AST. |
| Crocmagnon/fatcontext | 81 | 2 | 2026-07-28T07:27:14Z | Fatcontext detects nested contexts in loops or function literals. |
| surullabs/lint | 66 | 10 | 2025-08-04T20:26:54Z | Run linters as part of go test. |
| Checkmarx/chainjacking | 64 | 15 | 2026-07-06T07:33:14Z | Find which of your Go lang direct GitHub dependencies is susceptible to ChainJacking attack. |
| mccoyst/validate | 62 | 14 | 2025-02-27T22:04:43Z | Automatically validates struct fields with tags. |
| mainak55512/stto | 47 | 7 | 2026-07-12T20:18:31Z | A light-weight superfast line of code counter written in pure Go. |
| sashamelentyev/usestdlibvars | 47 | 6 | 2026-07-21T04:29:58Z | A linter that detect the possibility to use variables/constants from the Go standard library. |
| shinagawa-web/gomarklint | 19 | 2 | 2026-08-04T22:54:17Z | Markdown linter with built-in HTTP link validation, single binary, no Node.js required. |
| arxdsilva/golang-ifood-sdk | 13 | 3 | 2025-03-13T13:36:44Z | iFood API SDK. |
| peczenyj/structalign | 9 | 0 | 2026-07-11T22:44:37Z | Shows how a struct's fields could be reordered to use less memory, printing a diff instead of rewriting files. |
| arxeiss/deadmono | 2 | 0 | 2026-08-05T07:34:06Z | Wrapper around deadcode for detection of dead code in Go monorepo. |
| Repository | Stars | Forks | Last Updated | Description |
|---|---|---|---|---|
| stretchr/testify | 26k | 2k | 2026-08-05T17:06:22Z | . |
| golangci/golangci-lint | 19k | 2k | 2026-08-06T00:25:32Z | – A fast Go linters runner. It runs linters in parallel, uses caching, supports yaml config, has integrations with all major IDE and has dozens of linters included. |
| dominikh/go-tools | 7k | 417 | 2026-08-04T15:24:53Z | staticcheck is go vet on steroids, applying a ton of static analysis checks you might be used to from tools like ReSharper for C#. |
| mgechev/revive | 6k | 319 | 2026-08-05T08:09:20Z | – ~6x faster, stricter, configurable, extensible, and beautiful drop-in replacement for golint. |
| jfeliu007/goplantuml | 2k | 175 | 2026-08-04T09:50:56Z | Library and CLI that generates text plantump class diagram containing information about structures and interfaces with the relationship among them. |
| kisielk/errcheck | 3k | 146 | 2026-07-29T15:15:00Z | Errcheck is a program for checking for unchecked errors in Go programs. |
| go-critic/go-critic | 2k | 135 | 2026-08-03T13:10:07Z | source code linter that brings checks that are currently not implemented in other linters. |
| daveshanley/vacuum | 1k | 84 | 2026-07-30T14:44:14Z | An ultra-super-fast, lightweight OpenAPI linter and quality checking tool. |
| segmentio/golines | 1k | 78 | 2026-08-02T16:29:31Z | Formatter that automatically shortens long lines in Go code. |
| yuroyoro/goast-viewer | 793 | 65 | 2026-05-12T23:59:43Z | Web based Golang AST visualizer. |
| z7zmey/php-parser | 960 | 63 | 2026-07-20T09:44:08Z | A Parser for PHP written in Go. |
| sqs/goreturns | 537 | 53 | 2026-07-17T14:01:23Z | Adds zero-value return statements to match the func return types. |
| roblaszczak/go-cleanarch | 985 | 49 | 2026-07-24T07:20:15Z | go-cleanarch was created to validate Clean Architecture rules, like a The Dependency Rule and interaction between packages in your Go projects. |
| preslavmihaylov/todocheck | 438 | 46 | 2026-08-02T03:13:04Z | Static code analyser which links TODO comments in code with issues in your issue tracker. |
| tomarrell/wrapcheck | 373 | 33 | 2026-07-28T10:59:06Z | A linter to check that errors from external packages are wrapped. |
| psampaz/go-mod-outdated | 670 | 30 | 2026-07-21T06:14:23Z | An easy way to find outdated dependencies of your Go projects. |
| mdempsky/unconvert | 387 | 26 | 2026-07-21T05:13:08Z | Remove unnecessary type conversions from Go source. |
| mibk/dupl | 368 | 22 | 2026-07-21T05:47:09Z | Tool for code clone detection. |
| augmentable-dev/tickgit | 324 | 18 | 2026-06-05T22:58:14Z | CLI and go package for surfacing code comment TODOs (in any language) and applying a git blameto identify the author. |
| qiniu/checkstyle | 130 | 17 | 2026-02-23T14:36:51Z | checkstyle is a style check tool like java checkstyle. This tool inspired by java checkstyle, golint. The style referred to some points in Go Code Review Comments. |
| ast-metrics/ast-metrics | 151 | 16 | 2026-08-04T05:17:19Z | Static code analyzer for Go and other languages: complexity, coupling, cohesion and maintainability metrics, with HTML, JSON, Markdown and SARIF reports. |
| Checkmarx/chainjacking | 64 | 15 | 2026-07-06T07:33:14Z | Find which of your Go lang direct GitHub dependencies is susceptible to ChainJacking attack. |
| mccoyst/validate | 62 | 14 | 2025-02-27T22:04:43Z | Automatically validates struct fields with tags. |
| shurcooL/gostatus | 245 | 10 | 2025-08-05T10:32:06Z | Command line tool, shows the status of repositories that contain Go packages. |
| amit-davidson/Chronos | 440 | 10 | 2026-07-28T13:14:16Z | Detects race conditions statically |
| surullabs/lint | 66 | 10 | 2025-08-04T20:26:54Z | Run linters as part of go test. |
| mainak55512/stto | 47 | 7 | 2026-07-12T20:18:31Z | A light-weight superfast line of code counter written in pure Go. |
| sashamelentyev/usestdlibvars | 47 | 6 | 2026-07-21T04:29:58Z | A linter that detect the possibility to use variables/constants from the Go standard library. |
| bradleyfalzon/apicompat | 182 | 5 | 2026-04-07T13:59:30Z | Checks recent changes to a Go project for backwards incompatible changes. |
| asty-org/asty | 88 | 5 | 2026-07-05T12:32:03Z | Converts golang AST to JSON and JSON to AST. |
| arxdsilva/golang-ifood-sdk | 13 | 3 | 2025-03-13T13:36:44Z | iFood API SDK. |
| Crocmagnon/fatcontext | 81 | 2 | 2026-07-28T07:27:14Z | Fatcontext detects nested contexts in loops or function literals. |
| shinagawa-web/gomarklint | 19 | 2 | 2026-08-04T22:54:17Z | Markdown linter with built-in HTTP link validation, single binary, no Node.js required. |
| peczenyj/structalign | 9 | 0 | 2026-07-11T22:44:37Z | Shows how a struct's fields could be reordered to use less memory, printing a diff instead of rewriting files. |
| arxeiss/deadmono | 2 | 0 | 2026-08-05T07:34:06Z | Wrapper around deadcode for detection of dead code in Go monorepo. |
| Repository | Stars | Forks | Last Updated | Description |
|---|---|---|---|---|
| golangci/golangci-lint | 19k | 2k | 2026-08-06T00:25:32Z | – A fast Go linters runner. It runs linters in parallel, uses caching, supports yaml config, has integrations with all major IDE and has dozens of linters included. |
| stretchr/testify | 26k | 2k | 2026-08-05T17:06:22Z | . |
| mgechev/revive | 6k | 319 | 2026-08-05T08:09:20Z | – ~6x faster, stricter, configurable, extensible, and beautiful drop-in replacement for golint. |
| arxeiss/deadmono | 2 | 0 | 2026-08-05T07:34:06Z | Wrapper around deadcode for detection of dead code in Go monorepo. |
| shinagawa-web/gomarklint | 19 | 2 | 2026-08-04T22:54:17Z | Markdown linter with built-in HTTP link validation, single binary, no Node.js required. |
| dominikh/go-tools | 7k | 417 | 2026-08-04T15:24:53Z | staticcheck is go vet on steroids, applying a ton of static analysis checks you might be used to from tools like ReSharper for C#. |
| jfeliu007/goplantuml | 2k | 175 | 2026-08-04T09:50:56Z | Library and CLI that generates text plantump class diagram containing information about structures and interfaces with the relationship among them. |
| ast-metrics/ast-metrics | 151 | 16 | 2026-08-04T05:17:19Z | Static code analyzer for Go and other languages: complexity, coupling, cohesion and maintainability metrics, with HTML, JSON, Markdown and SARIF reports. |
| go-critic/go-critic | 2k | 135 | 2026-08-03T13:10:07Z | source code linter that brings checks that are currently not implemented in other linters. |
| segmentio/golines | 1k | 78 | 2026-08-02T16:29:31Z | Formatter that automatically shortens long lines in Go code. |
| preslavmihaylov/todocheck | 438 | 46 | 2026-08-02T03:13:04Z | Static code analyser which links TODO comments in code with issues in your issue tracker. |
| daveshanley/vacuum | 1k | 84 | 2026-07-30T14:44:14Z | An ultra-super-fast, lightweight OpenAPI linter and quality checking tool. |
| kisielk/errcheck | 3k | 146 | 2026-07-29T15:15:00Z | Errcheck is a program for checking for unchecked errors in Go programs. |
| amit-davidson/Chronos | 440 | 10 | 2026-07-28T13:14:16Z | Detects race conditions statically |
| tomarrell/wrapcheck | 373 | 33 | 2026-07-28T10:59:06Z | A linter to check that errors from external packages are wrapped. |
| Crocmagnon/fatcontext | 81 | 2 | 2026-07-28T07:27:14Z | Fatcontext detects nested contexts in loops or function literals. |
| roblaszczak/go-cleanarch | 985 | 49 | 2026-07-24T07:20:15Z | go-cleanarch was created to validate Clean Architecture rules, like a The Dependency Rule and interaction between packages in your Go projects. |
| psampaz/go-mod-outdated | 670 | 30 | 2026-07-21T06:14:23Z | An easy way to find outdated dependencies of your Go projects. |
| mibk/dupl | 368 | 22 | 2026-07-21T05:47:09Z | Tool for code clone detection. |
| mdempsky/unconvert | 387 | 26 | 2026-07-21T05:13:08Z | Remove unnecessary type conversions from Go source. |
| sashamelentyev/usestdlibvars | 47 | 6 | 2026-07-21T04:29:58Z | A linter that detect the possibility to use variables/constants from the Go standard library. |
| z7zmey/php-parser | 960 | 63 | 2026-07-20T09:44:08Z | A Parser for PHP written in Go. |
| sqs/goreturns | 537 | 53 | 2026-07-17T14:01:23Z | Adds zero-value return statements to match the func return types. |
| mainak55512/stto | 47 | 7 | 2026-07-12T20:18:31Z | A light-weight superfast line of code counter written in pure Go. |
| peczenyj/structalign | 9 | 0 | 2026-07-11T22:44:37Z | Shows how a struct's fields could be reordered to use less memory, printing a diff instead of rewriting files. |
| Checkmarx/chainjacking | 64 | 15 | 2026-07-06T07:33:14Z | Find which of your Go lang direct GitHub dependencies is susceptible to ChainJacking attack. |
| asty-org/asty | 88 | 5 | 2026-07-05T12:32:03Z | Converts golang AST to JSON and JSON to AST. |
| augmentable-dev/tickgit | 324 | 18 | 2026-06-05T22:58:14Z | CLI and go package for surfacing code comment TODOs (in any language) and applying a git blameto identify the author. |
| yuroyoro/goast-viewer | 793 | 65 | 2026-05-12T23:59:43Z | Web based Golang AST visualizer. |
| bradleyfalzon/apicompat | 182 | 5 | 2026-04-07T13:59:30Z | Checks recent changes to a Go project for backwards incompatible changes. |
| qiniu/checkstyle | 130 | 17 | 2026-02-23T14:36:51Z | checkstyle is a style check tool like java checkstyle. This tool inspired by java checkstyle, golint. The style referred to some points in Go Code Review Comments. |
| shurcooL/gostatus | 245 | 10 | 2025-08-05T10:32:06Z | Command line tool, shows the status of repositories that contain Go packages. |
| surullabs/lint | 66 | 10 | 2025-08-04T20:26:54Z | Run linters as part of go test. |
| arxdsilva/golang-ifood-sdk | 13 | 3 | 2025-03-13T13:36:44Z | iFood API SDK. |
| mccoyst/validate | 62 | 14 | 2025-02-27T22:04:43Z | Automatically validates struct fields with tags. |