Semgrep
A multilingual static-analysis tool and AppSec platform whose community engine runs local pattern, data-flow, and custom rules, with paid services adding cross-file, supply-chain, secret, and governance features.
Why use it
Semgrep lets teams encode crash patterns, unsafe APIs, and local conventions as versioned rules that report precise locations before review across game backends, tools, and scripting repositories.
Where it fits
Use testing, performance, accessibility, and diagnostic tools to remove problems players will notice.
What to check
The community engine is LGPL-2.1, while official rules and cloud features have separate licenses and limits; review code or metadata transfer before managed scans or AI and manually triage findings.