Semgrep is a fast, open-source, static analysis tool for modern languages. With 1,000+ existing rules and simple-to-create custom ones, it finds the bugs that matter.

• Open source, works on 17+ languages
• Scan with 1,000+ community rules
• Write rules that look like your code
• Quickly get results in the terminal, editor, or CI/CD
• Flag issues moving forward, get results in pull requests, Slack, + more

Codacy is an automated code analysis/quality tool that helps developers ship better software, faster. With Codacy, you get static analysis, cyclomatic complexity, duplication and code unit test coverage changes in every commit and pull request.

You can use Codacy to enforce your code quality standard, save time in code reviews, enforce security best practices and onboard developers faster. Integrate with your GitHub repositories to get quality analysis of every pull request inside GitHub.