Codety Scanner is a free and comprehensive source code scanner that detects code issues for 20+ programming languages and IaC tools. Codety Scanner's source code is contributed and maintained by Codety Inc.

Codety Scanner detects your code issues and report results to:

• GitHub pull request comments (check example here)
• GitHub pull request review comments (check example here)
• GitHub check run annotations (check example here)
• Slack
• GitLab merge request review comments(coming...)

• Detect code issues using 5000+ rules(both Codety built and community built rules), be able to detect issues like:
  • Insecure and vulnerable code
  • Unexpected secrets/tokens/API-keys in the code
  • Code smells and technical debt accumulation
  • Code style violations
  • Some performance issues
  • And more...
• Support 20+ programming languages and IaC tools:
  • Java
  • Python
  • Javascript
  • Typescript
  • C
  • C++
  • Go
  • Scala
  • html
  • Kotlin
  • Swift
  • Jsp
  • Apex
  • Modelica
  • Terraform code(AWS, GCP, Azure and OCI)
  • CloudFormation
  • Serverless framework
  • Helm charts
  • Kubernetes
  • Docker
  • (and keep adding more)

Check document Codety Scanner Quickstart

https://github.com/codetyio/codety-scanner/blob/main/LICENSE.txt