What is Codiga?
Codiga offers customizable static code analysis capabilities, supporting mainstream development environments such as VS Code, JetBrains, Visual Studio, GitHub, GitLab, and Bitbucket. Users can create, test, and share their own custom analysis rules within five minutes via a web browser. The tool comes pre-loaded with over 1,800 rules, covering authoritative security standards like OWASP Top 10, MITRE CWE, and SANS/CWE Top 25, while also supporting Terraform and Docker Infrastructure-as-Code (IaC) scanning. All analysis feedback is delivered in seconds, and vulnerability fixes can be applied automatically with a single click.
Key features
It supports real-time detection and one-click automatic remediation of security vulnerabilities and coding issues within the IDE, including common risks such as SQL injection and key leakage.
Users can customize static analysis rules and share them publicly or privately on the Codiga Hub, enabling teams to collaboratively establish unified code quality standards.
Use cases and audience
Software developers, DevSecOps engineers, technical team leaders, and organizations concerned with code security and quality.
- Detects and automatically remediates code security vulnerabilities in the IDE, such as SQL injection and key leakage.
- Perform automated code reviews within CI/CD pipelines (GitHub/GitLab/Bitbucket) to block non-compliant code commits.
- Share custom static analysis rules and intelligent code snippets across teams to standardize code quality.
Source code (supporting 12+ programming languages), infrastructure code (Terraform, Dockerfile), and user-defined rule logic.
Real-time in-IDE alerts and one-click fix suggestions, pre-commit blocking notifications, PR-level reports on code violations, team-shared rule sets and code snippets, and historical code quality metrics displayed on the Dashboard.
Frequently asked questions
Does Codiga support Infrastructure as Code (IaC) analysis?
Supports security analysis of Terraform and Docker code, ensuring infrastructure code is free from common vulnerabilities.
Can users create and privately share their own custom code analysis rules?
You can: create, test, and privately share rules in your browser within 5 minutes; it also supports publicly publishing to the Codiga Hub.
How to use
- 01
Install the Codiga plugin in VS Code, JetBrains, or Visual Studio.
- 02
After logging in, enable preconfigured rule sets (such as OWASP Top 10, SANS/CWE Top 25) from the Codiga Hub.
- 03
Receive real-time issue suggestions while coding and use a single click to autofix security vulnerabilities.
- 04
Configure Git hooks or PR checks to automatically block high-risk code before pushing or merging.
Official website & sources
Updated on 2026-10-30
