Note that https://clang-analyzer.llvm.org/scan-build.html is another llvm-based static analyzer.

It does a more deep analysis into the control flow, whereas clang-tidy does (mostly?) comparatively simpler checks on the AST.

You can actually run the static analysis checks from clang-tidy.

But you won't get the detailed HTML output that tells you why Clang Analyzer things a problem exists.

yep, see all the clang-analyzer checks listed here : https://clang.llvm.org/extra/clang-tidy/checks/list.html

direct link to cppcheck releases: https://github.com/danmar/cppcheck/releases