macOS
Homebrewverified · 100%
brew install datadog-static-analyzerlocal Homebrew formula metadata
brew
Install datadog-static-analyzer with Homebrew
Static analysis tool for code quality and security. Version 0.8.8 via Homebrew; verified 2026-06-30.
install
Additional install commands
overview
Package summary
Static analysis tool for code quality and security
Project links
Commands and aliases
- datadog-static-analyzer
- datadog-static-analyzer-git-hook
history
Project history and usage
Datadog Static Analyzer is the command-line static analysis engine for Datadog Static Code Analysis.
Project history
The public Datadog repository was created in July 2023 and published an initial 0.0.1 release that same month. Its README positions the analyzer as the engine behind Datadog's SAST product and documents direct CLI, Docker, CI/CD, and IDE usage.
Adoption history
Adoption follows Datadog's Code Security product rather than a standalone community plugin model: the official docs describe scans in CI/CD pipelines or hosted scanning, pull-request feedback, IDE integrations, and Datadog result views.
How it is used
Users run `datadog-static-analyzer` against a directory and emit CSV or SARIF-style reports, optionally selecting rules through a `code-security.datadog.yaml` file at the repository root.
Why package nerds care
For package managers, the analyzer is notable because it packages a vendor SAST engine as a local binary that can run outside the Datadog UI while still feeding Datadog-oriented code-security workflows.
Timeline
- 2023: Public repository created and 0.0.1 initial release published.
- 2026: 0.8.x releases show continuing binary distribution through GitHub releases.
Related projects
- Official integrations include a GitHub Action, a CircleCI orb, Datadog IDE plugins, and the broader Datadog Code Security product.
Sources
security posture
Risk level: green
narrow executable package without higher-risk signals.
Risk classifier
green risk · low confidence · appliance
Why
- narrow executable package without higher-risk signals
Signals
- metadata:no-higher-risk-signals
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- Homebrew bottle metadata is available for 6 platform targets.
- Installs with 1 runtime dependencies.
- Build metadata lists 2 build dependencies.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
code-security.datadog.yamlstatic-analysis.datadog.yml
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
datadog-static-analyzer | cli | global executable | |
datadog-static-analyzer-git-hook | cli | global executable |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-07-07
manager version0.8.8
manager updated2026-06-30
local dataok
upstreamcurrent
latest detected0.8.8
https://github.com/DataDog/datadog-static-analyzer
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:datadog-static-analyzer |
|---|---|
| Version | 0.8.8 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/datadog-static-analyzer |
| Homepage | https://docs.datadoghq.com/security/code_security/static_analysis/ |
| Repository | https://github.com/DataDog/datadog-static-analyzer |
| Upstream docs | https://docs.datadoghq.com/security/code_security/static_analysis |
| License | Apache-2.0 |
| Source archive | https://github.com/DataDog/datadog-static-analyzer/archive/refs/tags/0.8.8.tar.gz |
| Last updated | 2026-06-30T18:09:37Z |
| Pulse | updated |
| Dependencies | openssl@4 |
| Build dependencies | pkgconf, rust |
| Bottle | available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | datadog-static-analyzer |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated configuration and credential file locations
- curated package history
- package relationship graph
- package version freshness
- package-page enrichment