flawfinder(1) on Linux
The text f6963f29300e, as Debian 11 (Bullseye) shipped it.
lexically find potential security flaws ("hits") in source code
Flags it lists
-
--allowlink -
--columns -
--context -
--csv -
--dataonly -
--diffhitlist -
--error-level -
--falsepositive -
--followdotdir -
--help -
--html -
--immediate -
--inputs -
--listrules -
--loadhitlist -
--minlevel -
--neverignore -
--nolink -
--omittime -
--patch -
--quiet -
--regexp -
--savehitlist -
--singleline -
--version -
-C -
-D -
-F -
-H -
-I -
-P -
-Q -
-S -
-c -
-e -
-h -
-i -
-n