> ## Documentation Index
> Fetch the complete documentation index at: https://docs.coderabbit.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Linters & security analysis tools

> Integrate 40+ third-party tools like ESLint, Ruff, and Betterleaks into CodeRabbit reviews for enhanced code quality and 1-click fixes.

export const ProPlanBadge = ({tip = "This feature is available as part of the Pro, Pro+ and Enterprise plans. Please refer to our pricing page for more information about our plans and features.", title = "Pro Plan", cta = "Read more", href = "https://coderabbit.ai/pricing", disabled = false}) => {
  return <Tooltip tip={tip} cta={cta} href={href}>
        <Badge icon="shield-check" disabled={disabled || undefined}>
            {title}
        </Badge>
    </Tooltip>;
};

export const AllPlatformsBadge = ({tip = "This feature is available on all supported platforms: GitHub, GitLab, Azure DevOps, and Bitbucket.", title = "All Platforms", cta, href, disabled = false}) => {
  return <Tooltip tip={tip} cta={cta} href={href}>
        <Badge icon="globe" disabled={disabled || undefined}>
            {title}
        </Badge>
    </Tooltip>;
};

<AllPlatformsBadge /> | <ProPlanBadge />

CodeRabbit integrates with 40+ third-party linters and security analysis tools to enhance your code reviews. These tools run automatically in secure sandboxed environments, providing detailed feedback and 1-click fixes for common issues.

## Tool categories

<CardGroup cols={3}>
  <Card title="Code quality" icon="code" href="/tools/list">
    ESLint, Ruff, Pylint, SwiftLint, and 20+ more linters for code standards
  </Card>

  <Card title="Security analysis" icon="shield-check" href="/tools/list">
    Betterleaks, Microsoft Presidio Analyzer, Semgrep, Checkov, and Brakeman for vulnerability and sensitive-data detection
  </Card>

  <Card title="CI/CD integration" icon="cog" href="/pr-reviews/cicd-pipeline-analysis">
    CI/CD pipeline analysis for GitHub Actions, GitLab, CircleCI, and Azure DevOps
  </Card>
</CardGroup>

## Configuration methods

<Tabs>
  <Tab title="YAML configuration">
    Add tools to your repository's `.coderabbit.yaml` file:

    ```yaml YAML lines wrap icon="code" theme={null}
    reviews:
      profile: assertive
      tools:
        eslint:
          enabled: true
        ruff:
          enabled: true
          config_file: "pyproject.toml"
        gitleaks:
          enabled: true
    ```

    Use `reviews.tools.<tool>.enabled` to enable or disable individual tools. The optional `config_file` field points to your existing tool-specific configuration file (for example `.eslintrc.js` or `pyproject.toml`), letting you control which rules are active and their severity.
  </Tab>

  <Tab title="Settings page">
    Configure tools through CodeRabbit's web interface:

    1. Navigate to **Reviews → Tools** in your settings (use **All Settings** mode)
    2. Toggle individual tools on/off
    3. Set **Reviews → General → Profile** to `Chill` or `Assertive`
    4. Save changes to apply across all repositories
  </Tab>
</Tabs>

## Tool profiles

CodeRabbit offers two review profiles that control tool strictness:

* `Chill`: Focuses on critical issues and reduces noise from minor style violations
* `Assertive`: Provides comprehensive feedback including style and best practice suggestions

When a tool-specific configuration file is present in your repository (such as `.eslintrc.js` or `pyproject.toml`), CodeRabbit uses it as-is. When no configuration file is found, most tools fall back to a profile-based default configuration so reviews still run without any setup required.

## Tool output and fixes

When tools detect issues, CodeRabbit attaches structured output under the **"Review details"** comment in your pull or merge request. Each entry shows the file path, line number, and the issue detected:

```shell lines wrap icon="code" theme={null}
ESLint
src/components/Button.tsx
12-12: 'React' must be in scope when using JSX

Add React import statement

(react/react-in-jsx-scope)
```

Many tools provide 1-click fixes that CodeRabbit can apply directly to your pull request, streamlining the review process.

## Language support

Popular languages and their supported tools:

* **JavaScript/TypeScript**: Biome, ESLint, oxlint
* **Python**: Ruff, Pylint, Flake8
* **Go**: golangci-lint
* **Rust**: Clippy
* **Ruby**: RuboCop, Brakeman
* **Swift**: SwiftLint
* **PHP**: PHPStan, PHPMD, PHPCS

For the complete list of 40+ supported tools, see [supported tools](/tools/list).

## What's next

<CardGroup cols={1}>
  <Card title="Browse all tools" href="/tools/list" icon="list" horizontal>
    Complete list of linters, security tools, and CI/CD integrations
  </Card>

  <Card title="YAML configuration" href="/reference/configuration#reference" icon="settings" horizontal>
    Full reference for .coderabbit.yaml configuration options
  </Card>
</CardGroup>