Paul Krill
Editor at Large

JetBrains ships Qodana static code analysis tool

news
Jul 20, 20232 mins

Qodana integrates into CI/CD pipelines and with JetBrains IDEs and uses static code analysis to flag code quality, security, and performance issues.

programmers

JetBrains has just announced the public launch of its Qodana code quality monitoring platform, which plugs into CI/CD pipelines, integrates with JetBrains IDEs, and uses static code analysis to enforce code quality guidelines.

Launched July 19 after a preview period that began in 2021, Qodana offers an additional quality control layer at the CI/CD level and provides results directly to IDEs, reducing the need to switch between multiple tools, JetBrains said. Since the preview, JetBrains has added a number of improvements to streamline development and help developers deliver more secure and efficient code:

  • A vulnerability checker identifies vulnerable external packages and offers actional insights for remediation.
  • An experimental Quick Fixes feature allows for automatic application of fixes for certain issues.
  • Coverage now is offered for Java, Kotlin, PHP, JavaScript, and TypeScript. More languages will be added shortly. Developers can use Qodana in JetBrains IDEs including IntelliJ IDEA, WebStorm, PhpStorm, PyCharm, Rider, and GoLand.

Qodana finds performance issues, probable bugs, unused declarations, confusing code constructs, and violations of naming and style conventions, JetBrains said. A snapshot of the codebase is taken during a specific Qodana run. Developers can compare current code with the baseline state and see issues and resolutions. Developers can sign up for a free trial at jetbrains.com.

Qodana reports can be left in Qodana Cloud. Developers can explore project trends via interactive dashboards. Also, Qodana linters can read and write reports in SARIF format, for static code analysis tool output. Qodana can be integrated with third-party inspection tools or plug-ins to scan for problems not yet covered by the platform, JetBrains said.

Paul Krill

Paul Krill is editor at large at InfoWorld. Paul has been covering computer technology as a news and feature reporter for more than 35 years, including 30 years at InfoWorld. He has specialized in coverage of software development tools and technologies since the 1990s, and he continues to lead InfoWorld’s news coverage of software development platforms including Java and .NET and programming languages including JavaScript, TypeScript, PHP, Python, Ruby, Rust, and Go. Long trusted as a reporter who prioritizes accuracy, integrity, and the best interests of readers, Paul is sought out by technology companies and industry organizations who want to reach InfoWorld’s audience of software developers and other information technology professionals. Paul has won a “Best Technology News Coverage” award from IDG.

More from this author