Psalm

• Category: sast (PHP type inference)
• Fingerprint: rule-file-surrounding-3-lines-v1
• License: MIT

Psalm's type inference catches a different class of defect than a pattern-based SAST — missing null checks, impossible type narrowing, inconsistent return types.

sast:
  psalm: { enabled: true }

When to enable

PHP projects, especially those typed with modern PHP 8 type hints. Psalm's findings complement phpcs (code standards).