This classic book is still the best out there, although it is stale, being a reflection of 2004 state of best practices.
Free tools such as are good artifacts but also suffer from being stale:
Commercial tools such as:
Are often excellent for detecting a lot of coding issues, especially with recommended newer styles. The coverage of issues is likely 85-90%. There's are a variety of items that they do no catch.
This blog looks at issues that the above may not detect.