Codiga

About Codiga

Codiga is a static code analysis platform that integrates with IDEs (VS Code, JetBrains, Visual Studio) and CI/CD platforms (GitHub, GitLab, Bitbucket) to detect code quality and security issues in real time. It supports over 12 languages with more than 1,800 analysis rules, and provides automated fixes for coding issues and vulnerabilities directly in the editor. Users can create custom analysis rules, share them via the Codiga Hub, and enforce them across a team.

The platform's security analysis covers OWASP Top 10 and SANS/CWE Top 25 vulnerability categories, includes detection of leaked secrets such as SSH keys and API tokens, and extends to infrastructure code analysis for Terraform and Docker. It also performs automated code reviews on pull requests, flagging violations, duplicated code, and long or complex functions, and can run checks via git hooks before code is pushed.

Codiga additionally offers a code snippets feature, letting users create, store, and share reusable code snippets privately within a team or publicly through the Codiga Hub. A dashboard reports code quality metrics, including violation counts and historical analysis tied to commits and deployments. The company has been acquired by Datadog.

Key features

• Real-time static code analysis with autofix in VS Code, JetBrains, Visual Studio, GitHub, GitLab, and Bitbucket
• Custom analysis rules created, tested, and shared via the Codiga Hub in under 5 minutes
• Security analysis covering OWASP Top 10, MITRE CWE, and SANS/CWE Top 25, including leaked secret detection
• Automated code reviews on pull requests supporting 1800+ rules across 12+ languages
• Infrastructure code analysis for Terraform and Docker
• Code snippet creation and sharing via IDE and the Codiga Hub

Frequently asked questions