Great question! There are a lot of tools available for this and it’s very dependent your needs and technology/language used. Here are a couple questions I think are helpful to ask before looking for tools.
1.) Do you need something to give feedback on the dev’s local PC (inside their IDE) or based on the CI build process?
2.) Do you need to see historical results and trend reports?
A general tool my team and I use which supports multiple languages and technology stacks is SonarQube, https://www.sonarqube.org. We currently use it to aggregate static analysis, unit test, and code coverage results on each build for multiple C#, HTML, JavaScript, and CSS applications.