Codiga is a customizable static code analysis tool that gives you immediate feedback on code quality, spots issues and offers fixes. It works with many languages and plugs into many IDEs and code hosting sites. Codiga also offers automated code reviews, security checks, and a dashboard to track code quality metrics, so it's a good all-purpose tool for improving your code quality and security processes.
Another good option is PullRequest, a code review service that works with the most widely used source control systems, including GitHub, GitLab and Bitbucket. It offers on-demand and continuous code reviews, including AI-powered code reviews that spot high-risk security vulnerabilities and human reviewers for more nuanced analysis. It's particularly good for teams in highly regulated industries, where security is paramount.
Sonar is an online code review service that works with cloud DevOps services like GitHub, Bitbucket, Azure DevOps and GitLab. It automates code analysis and offers more advanced developer security tools, like secrets detection and SAST. SonarCloud supports more than 30 programming languages and frameworks, giving you results that are both useful and precise, and it's a good option if you want to ensure your code is high quality and secure.
If you want something more integrated, Codacy supports more than 40 programming languages and offers tools like CodacyQuality to enforce coding standards, CodacySecurity to find vulnerabilities and CodacyCoverage to improve test coverage. It integrates with GitHub, Bitbucket and GitLab, and its AI-based suggested fixes can be applied directly in Git workflows.