This is kind of like a product recommendation, so it may end up closed however. You should also be careful to distinguish between a checklist and a standard.
If you are looking for some high level checklists to use for your development process, you may want to checks out SANS SWAT, which covers more logical considerations rather then specific code level issues. You may also be interested in the ISO 27000 (i.e., ISO/IEC 27034) series (not just 27001 or 27002). Other methodologies include STRIDE (would not recommend) and DREAD from Microsoft
It's not clear if this is for a specific programming language, but NASA JPL has guidelines for C and JAVA which may be useful to consider as part of security standards. Oracle has their own JAVA secure guidelines. The CERT guidelines already in Jaques answer are also in the same realm.
You will need to clarify your objectives and build upon these tools to create:
- Secure coding standards (code will be formatted this way)
- Library/platform specific standards (CSRF tokens will use this common function)
- Secure development/SDLC practices (code will be put through these scanners, tools, or processes before being committed; pen test before promoted to production)
- Ongoing testing and review (regularly occurring application re-certifications; responsible disclosure procedures)
A checklist might be a good way to start as it is clear cut, but bad processes can be just as harmful - e.g., you promote the wrong branch with the buggy code).