# Rule-catalog coverage **23062 rules** across **51 tools** and **87 ecosystems**. | Tool | Ecosystem | Rules | Version | | ------------------ | ---------- | ----: | ---------------------------------------- | | codeql | multi(14) | 2831 | repo-main | | sonar | multi(9) | 2678 | analyzers | | semgrep | multi(29) | 2099 | registry | | eslint-plugins-ext | multi(3) | 1850 | 22.0.0 | | kics | multi(17) | 1801 | registry | | checkov | multi(18) | 1128 | repo-main | | ruff | python | 920 | ruff 0.11.6 | | clippy | rust | 788 | clippy 0.1.89 (29483883ee 2025-08-04) | | error-prone | java | 646 | master | | rubocop | ruby | 606 | 1.88.1 | | trivy | multi(11) | 571 | checks | | clang-tidy | cpp | 568 | llvm-main | | shellcheck | shell | 520 | wiki | | spotbugs | java | 519 | installed | | oxlint | typescript | 461 | unknown | | pmd | multi(14) | 460 | repo-main | | rubocop-plugins | ruby | 445 | latest | | pylint | python | 389 | pylint 4.0.6 | | psalm | php | 320 | master | | eslint | javascript | 292 | 10.6.0 | | swiftlint | swift | 253 | main | | detekt | kotlin | 227 | main | | rustc | rust | 219 | clippy 0.1.89 (29483883ee 2025-08-04) | | checkstyle | java | 206 | repo-main | | phpcs | php | 204 | PHP_CodeSniffer version 4.0.1 (stable) b | | staticcheck | go | 149 | staticcheck 2026.1 (v0.7.0) | | stylelint | css | 149 | 17.13.0 | | perlcritic | perl | 145 | HEAD | | credo | elixir | 129 | HEAD | | lintr | r | 117 | HEAD | | golangci-lint | go | 114 | golangci-lint has version 2.12.2 built w | | clj-kondo | clojure | 113 | master | | go-critic | go | 108 | HEAD | | revive | go | 105 | master | | slither | solidity | 104 | HEAD | | hadolint | dockerfile | 102 | readme | | brakeman | ruby | 86 | HEAD | | mypy | python | 78 | repo-master | | bandit | python | 75 | python.exe -m bandit 1.9.4 | | sqlfluff | sql | 75 | 4.2.2 | | scalastyle | scala | 72 | master | | luacheck | lua | 56 | master | | phpmd | php | 56 | PHPMD 2.15.0 | | govlab-eslint | javascript | 48 | unknown | | eslint-plugins | multi(2) | 46 | 3.2.0 | | gosec | go | 39 | repo-master | | prettier | javascript | 29 | 3.8.3 | | yamllint | yaml | 23 | yamllint 1.38.0 | | htmlhint | html | 20 | unknown | | govlab-stylelint | css | 15 | unknown | | govlab-native | typescript | 8 | unknown | ## By ecosystem | Ecosystem | Rules | | ----------------------- | ----: | | javascript | 3132 | | java | 3117 | | python | 2652 | | terraform | 1377 | | ruby | 1325 | | cpp | 1236 | | rust | 1087 | | php | 888 | | csharp | 853 | | go | 727 | | typescript | 704 | | shell | 520 | | cloudformation | 416 | | hcl | 357 | | swift | 309 | | generic | 303 | | kubernetes | 257 | | kotlin | 245 | | ansible | 234 | | regex | 233 | | openapi | 215 | | vbnet | 212 | | css | 207 | | dockerfile | 200 | | aws | 175 | | arm | 167 | | solidity | 154 | | yaml | 151 | | perl | 145 | | elixir | 136 | | clojure | 118 | | r | 117 | | scala | 95 | | apex | 83 | | ql | 77 | | sql | 75 | | google | 75 | | azure | 73 | | lua | 56 | | json | 51 | | actions | 47 | | azureresourcemanager | 42 | | googledeploymentmanager | 35 | | ocaml | 34 | | github | 30 | | secrets | 30 | | html | 27 | | plsql | 23 | | dockercompose | 21 | | pulumi | 21 | | nifcloud | 21 | | crossplane | 18 | | ecmascript | 18 | | c | 16 | | bash | 13 | | jsp | 12 | | serverlessfw | 10 | | velocity | 9 | | digitalocean | 9 | | circleci_pipelines | 8 | | codeql | 7 | | github_actions | 6 | | openstack | 5 | | azure_pipelines | 4 | | cicd | 4 | | serverless | 3 | | gitlab_ci | 3 | | modelica | 3 | | xml | 3 | | visualforce | 3 | | text | 3 | | argo_workflows | 2 | | unified | 2 | | xsl | 2 | | pom | 2 | | bitbucket_pipelines | 1 | | bitbucket | 1 | | example_runner | 1 | | gitlab | 1 | | test | 1 | | buildah | 1 | | common | 1 | | grpc | 1 | | knative | 1 | | dart | 1 | | cloudstack | 1 | | oracle | 1 |