# Install datadog-static-analyzer with Homebrew Static analysis tool for code quality and security. Version 0.8.8 via Homebrew; verified 2026-06-30. ## Install ```sh sudo av install brew:datadog-static-analyzer ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install datadog-static-analyzer ``` Evidence: local Homebrew formula metadata ## Package facts - **Package key:** brew:datadog-static-analyzer - **Package manager:** Homebrew - **Package manager page:** - **Version:** 0.8.8 - **Source summary:** Static analysis tool for code quality and security - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** Apache-2.0 - **Source archive:** - **Last updated:** 2026-06-30T18:09:37Z - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - datadog-static-analyzer (cli) - datadog-static-analyzer-git-hook (cli) - datadog-static-analyzer (alias) - datadog-static-analyzer-git-hook (alias) ## Dependencies - openssl@4 ## Build dependencies - pkgconf - rust ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 0.8.8 - Package-manager updated: 2026-06-30 - Local data: ok - Upstream repository: https://github.com/DataDog/datadog-static-analyzer - Upstream latest detected: 0.8.8 (current) ## Project history and usage Datadog Static Analyzer is the command-line static analysis engine for Datadog Static Code Analysis. ### Project history The public Datadog repository was created in July 2023 and published an initial 0.0.1 release that same month. Its README positions the analyzer as the engine behind Datadog's SAST product and documents direct CLI, Docker, CI/CD, and IDE usage. ### Adoption history Adoption follows Datadog's Code Security product rather than a standalone community plugin model: the official docs describe scans in CI/CD pipelines or hosted scanning, pull-request feedback, IDE integrations, and Datadog result views. ### How it is used Users run `datadog-static-analyzer` against a directory and emit CSV or SARIF-style reports, optionally selecting rules through a `code-security.datadog.yaml` file at the repository root. ### Why package nerds care For package managers, the analyzer is notable because it packages a vendor SAST engine as a local binary that can run outside the Datadog UI while still feeding Datadog-oriented code-security workflows. ### Timeline - 2023: Public repository created and 0.0.1 initial release published. - 2026: 0.8.x releases show continuing binary distribution through GitHub releases. ### Related projects - Official integrations include a GitHub Action, a CircleCI orb, Datadog IDE plugins, and the broader Datadog Code Security product. ### Sources - - - - ## Security Notes narrow executable package without higher-risk signals. - **Geiger risk:** green / low - narrow executable package without higher-risk signals ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: code-security.datadog.yaml, static-analysis.datadog.yml ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** datadog-static-analyzer - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Related links - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Text processing packages](https://www.automicvault.com/pkg/text-processing-tools/) - Matched text, document, or structured-data processing metadata. - [Developer build packages](https://www.automicvault.com/pkg/developer-build-tools/) - Matched build, compiler, generator, or developer workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [openssl@4](https://www.automicvault.com/pkg/brew/openssl-4/) - Runtime dependency declared by Homebrew. - [pkgconf](https://www.automicvault.com/pkg/brew/pkgconf/) - Build dependency declared by Homebrew. - [rust](https://www.automicvault.com/pkg/brew/rust/) - Build dependency declared by Homebrew. - [globstar](https://www.automicvault.com/pkg/brew/globstar/) - Shares av.db curated category or tags: ci, cli, code-quality, developer-tools, static-analysis. - [sonar-scanner](https://www.automicvault.com/pkg/brew/sonar-scanner/) - Shares av.db curated category or tags: ci, cli, code-quality, developer-tools, static-analysis. - [staticcheck](https://www.automicvault.com/pkg/brew/staticcheck/) - Shares av.db curated category or tags: ci, cli, code-quality, developer-tools, static-analysis. - [checkstyle](https://www.automicvault.com/pkg/brew/checkstyle/) - Shares av.db curated category or tags: cli, code-quality, developer-tools, static-analysis. - [credo](https://www.automicvault.com/pkg/brew/credo/) - Shares av.db curated category or tags: cli, code-quality, developer-tools, static-analysis. - [detekt](https://www.automicvault.com/pkg/brew/detekt/) - Shares av.db curated category or tags: cli, code-quality, developer-tools, static-analysis. - [eslint](https://www.automicvault.com/pkg/brew/eslint/) - Shares av.db curated category or tags: cli, code-quality, developer-tools, static-analysis. - [go-critic](https://www.automicvault.com/pkg/brew/go-critic/) - Shares av.db curated category or tags: cli, code-quality, developer-tools, static-analysis. ## Combined YAML source View the package source record on GitHub. [combined/datadog-static-analyzer.yml](https://github.com/automic-vault/db/blob/main/combined/datadog-static-analyzer.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - cross-ecosystem install command graph