Semgrep

Semgrep is a fast, open source static analysis tool that finds bugs and security issues using lightweight rules that resemble the code they match. It supports many programming languages. It is developed by the company formerly known as r2c.