Qodana 关于

您最喜爱的 CI 工具的代码质量平台。

Qodana is a code quality platform by JetBrains. This static analysis engine enables development teams to automate code reviews, build quality gates, and enforce code quality guidelines enterprise-wide - all within their JetBrains ecosystems. The platform can be integrated into any CI/CD pipeline and can analyze code written in 60+ languages including Java, JavaScript, TypeScript, PHP, Kotlin, Python, Go, and C#.

Qodana Features

  • Qodana brings all of the inspections from JetBrains IDEs to the CI/CD pipeline. Qodana scan results are available in IDEs out of the box, giving you a single source of truth for code quality.
  • Qodana is designed to integrate with any CI pipeline and workflow. Trigger the analysis by specified branch or pull request, build the quality gate, explore code quality analytics, and let Qodana do the work for you.
  • Analyze the quality of every language in your projects, including Java, JavaScript, TypeScript, PHP, C#, and Python.
  • Qodana is made for:
    • Developers - Automate routine code reviews, spot bugs quickly, and provide high-quality, maintainable code.
    • QA engineers - Perform quality tests, spot and fix issues before they hit production, and streamline test planning.
    • Development team leads - Improve your team's productivity, ensure that work is planned correctly and delivered on time, and minimize disruptions to the delivery process.
    • Security managers - Thwart vulnerabilities across the code and reduce compliance and security risks.
    • Legal - Gain full control over third-party licenses and detect improper licenses before they become a legal issue.

Powerful static code analysis

  • Interactive inspection reports - Discover issues and trends in your code and better understand the quality of your project.
  • 2,500+ inspections - Qodana spots performance issues, probable bugs, unused declarations, confusing code constructs, naming and style conventions, and much more.
  • Baseline - A snapshot of the codebase, or baseline, is taken during a specific Qodana run. You can compare your current code with its baseline state and see new, unchanged, and resolved problems.
  • Security checks - Qodana performs various checks to prevent security breaches and spots vulnerable dependencies imported into the project.
  • Third-party license audit - Scan dependencies in your code repository to find their licenses and see if there are any potential issues.
  • SARIF support - Qodana linters can read and write reports in SARIF format, which is the industry standard for static code analysis tool output.
  • Inspection constructor - Looking to scan for a specific problem that Qodana doesn't cover yet? You can integrate it with third-party inspection tools or create your own plugins.

Integrated with your JetBrains IDEs

  • Open detected problems in your IDE - Qodana is bundled with your favorite IDE out of the box. Navigate between the problems detected by linters and fix them as you go. It supports IntelliJ IDEA, PhpStorm, GoLand, Rider, WebStorm and PyCharm.
  • Run resource-intensive checks without degrading IDE performance - In a large codebase, data flow analysis requires so many additional resources that it's almost impossible to run on a developer's machine. With Qodana, you can run these checks on the server and deliver their results directly to your IDE.

Designed to connect to your CI/CD pipeline

  • Integrate with your CI/CD pipeline, in-cloud or on-premises - With Qodana in your CI pipeline, you can find defects early in the development cycle. If your CI system's user interface can be extended, the Qodana UI will seamlessly integrate with it. You can similarly explore code quality analytics in Qodana Cloud.
  • Set up quality gates - To prevent poor code from ending up in your repository, fail pipelines when the code quality doesn't meet your guidelines. Build quality gates in any CI pipeline, including GitHub Actions, GitLab, Jenkins, TeamCity and others.

Supports 60+ popular languages and development frameworks and endless CI/CD integrations including:

  • Java
  • Kotlin
  • Android
  • JavaScript
  • TypeScript
  • PHP
  • C#
  • Python
  • Go
  • HTML
  • CSS
  • Vue.js
  • VB.NET
  • GitHub Actions
  • GitLab
  • TeamCity
  • Jenkins
  • Azure Pipelines
  • CirclCI
  • Space
  • and any other CI/CD system