Write SAST checkers with Globstar and run them in your CI with a single binary. It's fast, easy to write, and MIT-licensed.
Globstar is designed to be fast. It's built with Go and uses native tree-sitter bindings for parsing, so you can run hundreds of checks in seconds.
Write checkers in a simple YAML file, with tree-sitter's S-expressions for matching patterns. No more custom DSL to learn.
Use Globstar in your projects, commercial or otherwise. It's MIT-licensed, and we are committed to keeping it that way.
It's a single binary that you can run in your CI pipeline. No need to install dependencies or manage complex configurations.
Use the Go API for advanced checkers, with full access to the tree-sitter AST, imports and scope resolution, cross-file analysis, and more.
Don't want to write your own checkers? Use the built-in checkers for common issues like security vulnerabilities, code quality, and more.