Skip to content
SPECIFICTION
Get listed

Ruby Static Analysis Tools

Alternatives to Semgrep Supply Chain

The tools Specifiction weighs against Semgrep Supply Chain, from its list of ruby static analysis tools, each with its plans, platforms and spec score.

  1. 01 DeepSource

    DeepSource suits software teams that want automated pull-request checks, security scanning, and code coverage controls.

    From $2/mo Free plan Web · Windows · macOS · Linux
    9.3 Visit Specs
  2. 02 GitHub CodeQL
    From $30/mo Free plan Web · Windows · macOS · Linux
    8.5 Visit Specs
  3. 03 Codacy

    Codacy suits engineering teams seeking pull-request review and security scanning in a cloud platform.

    From $1.50/mo Free plan Web · Browser extension
    8.4 Visit Specs
  4. 04 Brakeman
    Free plan Linux · Self-hosted
    8.1 Visit Specs
  5. 05 Reek
    Free plan Linux
    8.1 Visit Specs
  6. 06 bundler-audit
    Free plan macOS · Linux
    7.9 Visit Specs
  7. 07 Qlty Cloud

    It suits software teams that want code and coverage feedback in pull requests, especially teams using GitHub.

    From $20/mo Web · Windows · macOS · Linux
    7.9 Visit Specs
  8. 08 Dawnscanner
    Free plan Linux · Self-hosted
    7.8 Visit Specs
  9. 09 RuboCop
    Free plan Linux · Self-hosted
    7.6 Visit Specs
  10. 10 OpenText Fortify SAST
    Web · Windows · macOS · Linux
    6.1 Visit Specs
  11. 11 Flay
    Windows · macOS · Linux
    6.0 Visit Specs
  12. 12 ERB Lint
    5.7 Visit Specs
  13. 13 Rails Best Practices
    Windows · macOS · Linux
    5.7 Visit Specs
  14. 14 Flog
    5.6 Visit Specs
  15. 15 RubyCritic
    Windows · macOS · Linux
    5.6 Visit Specs
  16. 16 Snyk Code
    Web
    5.4 Visit Specs
  17. 17 Steep
    Windows · macOS · Linux
    5.4 Visit Specs
  18. 18 Sorbet
    macOS · Linux
    5.3 Visit Specs
  19. 19 Slim-Lint
    5.2 Visit Specs
  20. 20 TypeProf
    5.0 Visit Specs

Semgrep Supply Chain, head to head