Infer
6.7#5 in c and c++ static analysis toolsFree planFree planWebLinuxmacOSSelf-hosted
Visit
| Fact | Infer | Semgrep Code |
|---|---|---|
| Installation | Infer can be installed from binary releases, built from source, or run using Docker images. | Official installation paths include Homebrew on macOS, pip on Windows and Linux, and a semgrep/semgrep Docker image on Linux. |
| Integrations | Infer documents integrations for Buck, cmake, Gradle, Make, Maven, Xcodebuild, xctool, and compilation databases. | Supported workflow connections include GitHub, GitLab, Bitbucket, Jenkins, CircleCI, Azure, Buildkite, HackerOne, Slack, email, webhooks, VS Code and IntelliJ. |
| Languages | The documentation lists Java, C, C++, Objective-C, and Erlang; the latest release notes also describe Python and Swift frontends and an experimental Rust frontend. | Semgrep lists support for more than 30 programming languages and frameworks for SAST and nine for SCA. |
| Purpose | Infer is a static analysis tool that produces a list of potential bugs from Java or C/C++/Objective-C code. | Semgrep Code is a static application security testing product that finds code vulnerabilities and helps developers fix them. |
Infer suits developers and teams who want static checks for supported languages before code ships, including in CI workflows. It is not suitable for Windows-native use, and it only analyzes files captured during compilation.
Semgrep Code suits development teams looking for source-code vulnerability scanning within pull request, IDE or CI workflows. The listed Free Edition is for teams within its repository and contributor limits; larger teams can consider the paid tiers.