flawfinder

flawfinder is an open-source security and privacy tool for Linux. It is intended for people who write, maintain, or review C and C++ source code. The program provides a straightforward way to inspect source code for areas that may need closer attention. It can also serve as an introduction to static source code analysis.

The tool is designed to be easy to install and use. Its purpose is to help identify potential concerns in code, rather than replace a broader software security review. flawfinder supports the Common Weakness Enumeration, commonly called CWE. It is officially CWE-Compatible, connecting its findings with a recognized classification system for software weaknesses.

On MirrorNest, flawfinder is listed in the Linux section of the Security & Privacy category. MirrorNest mirrors the official build directly onto its own storage for distribution through the catalog. Before publishing, the mirrored build is scanned for malware. This gives Linux users a catalog-based way to obtain the mirrored software while retaining its open-source licensing and its intended focus on C and C++ code review.