GitHub - Corgea/Sighthound: Corgea's rule-based SAST scanner

Sighthound is an open-source, rule-based static application security testing (SAST) scanner built in Rust using Tree-sitter for AST-aware parsing. It supports pattern matching and taint-flow (source-to-sink) analysis across 10+ languages including Python, JavaScript, TypeScript, Java, PHP, C#, Go, Ruby, and HTML. Rules are written in RON format and support both search and taint modes. The tool handles multi-file projects with parallel execution and outputs findings as text, JSON, or CSV. It can be built from source with Cargo or deployed via Docker.