Codiga
Free
Analyze code in real-time with customizable static analysis rules, receive instant fixes in your IDE, and block deployments that fail security or quality checks in CI/CD pipelines.
infoAbout Codiga
Codiga is a customizable static code analysis engine that provides real-time security and quality scanning for developers writing software. The platform analyzes code as it is written, identifying vulnerabilities and coding issues with automatic fix suggestions that can be applied in one click. Codiga integrates with multiple development environments and workflow stages. It functions as an IDE extension for VS Code, JetBrains, and Visual Studio, providing instantaneous analysis and autofix capabilities during coding. It also operates in CI/CD pipelines through integrations with GitHub, GitLab, and Bitbucket, including Git Hooks that can block deployment of code that fails quality standards. The platform covers security standards including OWASP Top 10, MITRE CWE, and SANS/CWE Top 25. Users can select from pre-built rules in the Codiga Hub or design custom analysis rules. A dashboard tracks code quality metrics such as violations, duplicates, and complex functions across the software development lifecycle. The tool supports the most popular programming languages and libraries. Codiga has joined Datadog, and the platform is now offered as Datadog Static Analysis.