"dscanner" names a product that does not appear among the candidates, so no source confirms it. D-Scanner is not listed in the candidate products, and none of the sources describe it; the closest software in the set is Dlang 10, the D programming language, which the request may relate to. The alternatives below are general static analysis tools that cover code-quality and security scanning, drawn from the sources.
A question back: Did you mean D-Scanner, the static analyzer for the D language? It is not in our candidate list, so I could not verify it; tell me the language or the platform you need and I can narrow the choice.
- 1
SonarQube Cloudsonarsource.comverified and signed
Performs automated code quality and security analysis across 40+ languages, including bugs, vulnerabilities and code smells, and integrates into CI/CD pipelines 111.
+19 community tools built for it
for agents: SonarSource/sonarqube-scan-action · sonarqube · SonarSource/sonarqube-quality-gate-action
- 2
- 3
Code Pathfindercodepathfinder.devwebsite read, tools not yet checked
Open-source static analysis that traces vulnerabilities across files with type-aware taint analysis, with rules for Go, Python and Docker 7.
official:MCP server · Code Pathfinder+1 community tools built for it
Sources
- 1Homepage | SonarQube Cloud | Sonar Documentationdocs.sonarsource.com · read 2026-10-29
- 7Code Pathfinder | Open Source Cross-File Static Code Analysis & SASTcodepathfinder.dev · read 2026-10-29
- 8Trivytrivy.dev · read 2026-10-29
- 10Home - D Programming Languagedlang.org · read 2026-10-29
- 11Official SonarQube Scan: declares "SonarSource/sonarqube-scan-action" (the record we read and signed)unfragile.ai · read 2026-10-24
For agents: the 10 actions behind this answer
SonarSource/sonarqube-scan-action · Official SonarQube Scan verified and signed
Scan your code with SonarQube Server and Cloud to detect issues in 30+ languages. (Formerly SonarQube and SonarCloud)
zizmorcore/zizmor-action · zizmor-action verified and signed
Run zizmor from GitHub Actions 🌈
antlr · ANTLR 3 Runtime verified and signed
· dprint website read, tools not yet checked
A pluggable and configurable code formatting platform written in Rust.
· Me website read, tools not yet checked
Difftastic, a structural diff tool that understands syntax
squirrelscan · squirrelscan verified and signed
squirrelscan audits websites for SEO, performance, security, accessibility, content, and structured data issues (300+ rules) and scores site health, via the squirrel CLI. Use when the user wants to check, audit, or improve a website's SEO, ranking, speed, or health, and for anything squirrelscan its
· Code Pathfinder website read, tools not yet checked
Code Pathfinder v2.1.0 traces vulnerabilities across files with type-aware taint analysis. 210+ rules for Go, Python, Docker. Open source SAST with inter-procedural dataflow tracking.
· Trivy website read, tools not yet checked
Trivy is the most popular open source security scanner for Vulnerability &, IaC, SBOM discovery, cloud scanning and Kubernetes security
· Vibgrate website read, tools not yet checked
Vibgrate scans your repository on your machine. It shows how far your stack has fallen behind, finds dependencies with known vulnerabilities, and gives your coding agent focused context from the code you actually run. Free, no account, raw source is not uploaded.
· Dlang website read, tools not yet checked
D is a general-purpose programming language with static typing, systems-level access, and C-like syntax.
Labels are the instruments' verdict and are never changed by ranking. Agents and robots get this same answer as JSON at /api/v1/find?q=…&answer=1 and through the MCP server.