Paul Krill
Editor at Large

JetBrains Qodana previews taint analysis for PHP

news
Mar 7, 20232 mins

Qodana automates code quality checks and performs tasks such as spotting duplicates, possible bugs, and formatting issues in a number of programming languages.

Binary code / magnifying lens / inspection / analysis
Credit: Andreus / Getty Images

JetBrains’ Qodana code quality platform, which provides visualizations of code inspections and errors, has added taint analysis. The new feature defends programs against malicious inputs from external users, the company said.

Currently available in an early preview stage for PHP developers, taint analysis includes an inspection that scans code and highlights a taint and potential vulnerability. Developers can open the problem in JetBrains’ PhpStorm IDE for PHP to immediately address it. The IDE presents a dataflow graph of the taint flow, alerting developers to problematic areas. JetBrains promises taint analysis support for other languages in the near future.

Working with JetBrains IDEs but not requiring one, Qodana supports languages including Python, JavaScript, Go, Java, Kotlin, and PHP, as well as Microsoft’s .NET platform. All but Java and Kotlin are in an early access stage at the moment.

Qodana automates code quality checks and performs tasks such as spotting duplicates, possible bugs, formatting issues, and checks for adherence to other rules of the user’s choice. The same code inspections and profiles leveraged in JetBrains’ IDEs are used in Qodana. Developers can try Qodana locally or in the cloud. The platform can integrate with CI pipelines to enable early detection of defects.

Paul Krill

Paul Krill is editor at large at InfoWorld. Paul has been covering computer technology as a news and feature reporter for more than 35 years, including 30 years at InfoWorld. He has specialized in coverage of software development tools and technologies since the 1990s, and he continues to lead InfoWorld’s news coverage of software development platforms including Java and .NET and programming languages including JavaScript, TypeScript, PHP, Python, Ruby, Rust, and Go. Long trusted as a reporter who prioritizes accuracy, integrity, and the best interests of readers, Paul is sought out by technology companies and industry organizations who want to reach InfoWorld’s audience of software developers and other information technology professionals. Paul has won a “Best Technology News Coverage” award from IDG.

More from this author