Browse all third-party open-source linters, security analyzers, and CI/CD tools that CodeRabbit uses in code reviews. Click any tool name for its configuration guide.Documentation Index
Fetch the complete documentation index at: https://docs.coderabbit.ai/llms.txt
Use this file to discover all available pages before exploring further.
Multipurpose tools
These tools run on many or all file types in your repository. They identify general bugs and security risks, including pattern-based and semantic code analysis, secret exposure, insecure dependencies, misconfigured infrastructure-as-code, and causes of failing CI/CD pipelines.| Tool | Category |
|---|---|
| ast-grep, OpenGrep, Semgrep | Code Quality, Code Security |
| Betterleaks | Secret Scanning |
| Microsoft Presidio Analyzer | PII detection |
| OSV-Scanner | Package Version Security |
| CI/CD Pipeline Analysis | CI/CD Generic User Configured |
| Checkov, Trivy | IaC Code Security |
| TruffleHog | Secret Scanning |
Tools by category
| Category | Tools |
|---|---|
| Multipurpose | ast-grep, OpenGrep, Semgrep |
| Security | Betterleaks, TruffleHog, Microsoft Presidio Analyzer, OSV-Scanner, Brakeman |
| Languages | ESLint, Biome, Oxlint, Ruff, Pylint, Flake8, golangci-lint, Clippy, RuboCop, SwiftLint, PHPStan, PHPMD, PHPCS, PMD, detekt, Clang-Tidy, Cppcheck, Luacheck, ShellCheck, Blinter, Fortitude, Regal, PSScriptAnalyzer, smarty-lint, SQLFluff, Prisma Lint, Stylelint, HTMLHint, ember-template-lint, YAMLlint, Dotenv Linter, Buf, checkmake, Shopify CLI |
| Infrastructure as code | Checkov, Trivy, TFLint, Hadolint |
| CI/CD | actionlint, CircleCI, GitHub Checks, CI/CD Pipeline Analysis |
| Docs and prose | markdownlint, LanguageTool |
Tools by technology
The following tools are automatically selected and run based on the specific languages, file types, or frameworks detected in your repositories. CodeRabbit determines which tools to run depending on the contents of your codebase, recent changes, or the presence of relevant configuration files. Pipeline tools will only trigger based on platform or configured CircleCI integration.| Technology | Tools | Category |
|---|---|---|
| Astro | Biome, oxlint, ESLint | Code Quality |
| Azure ARM | Checkov, Trivy | Code Security |
| Azure DevOps Pipelines | CI/CD Pipeline Analysis | CI/CD Pipeline Analysis |
| CircleCI | CircleCI | Configuration Validation |
| CloudFormation | Checkov, Trivy | Code Security |
| Cppcheck | Cppcheck | Code Quality |
| Clang | Clang-Tidy | Code Quality |
| CSS | Biome, Stylelint, ESLint | Code Quality |
| Docker | Hadolint, Checkov, Trivy | Code Quality, Code Security |
| Docker Compose | Checkov, Trivy | Code Security |
| Environment Files (.env) | Dotenv Linter | Code Quality |
| Fortran | Fortitude | Code Quality |
| GraphQL | ESLint | Code Quality |
| GitHub Actions | actionlint | Code Quality, CI/CD Pipeline Analysis |
| GitLab Pipelines | CI/CD Pipeline Analysis | CI/CD Pipeline Analysis |
| Go | golangci-lint | Code Quality |
| Helm | Checkov, Trivy | Code Security |
| HTML | HTMLHint | Code Quality |
| Javascript | Biome, oxlint, ESLint | Code Quality |
| JSON, JSONC | Biome, Checkov | Code Quality |
| JSX | Biome, oxlint, ESLint | Code Quality |
| Kotlin | detekt | Code Quality |
| Kubernetes | Checkov, Trivy | Code Security |
| Less | Stylelint | Code Quality |
| Lua | Luacheck | Code Quality |
| Makefile | Checkmake | Code Quality |
| Markdown | markdownlint, LanguageTool | Code Quality, Grammar Checking |
| PHP | PHPStan, PHPMD, PHPCS | Code Quality |
| Plaintext | LanguageTool | Grammar and Spell Checking |
| Java | PMD | Code Quality |
| Protobuf | Buf | Code Quality |
| Python | Ruff, Pylint, Flake8 | Code Quality |
| Jupyter Notebooks | Ruff, Pylint, Flake8 | Code Quality |
| Regal | Regal | Code Quality |
| PowerShell | PSScriptAnalyzer | Code Quality |
| Ruby | RuboCop, Brakeman | Code Quality, Code Security |
| Rust | Clippy | Code Quality |
| Sass | Stylelint | Code Quality |
| Shell (sh, bash, ksh, dash) | ShellCheck | Code Quality |
| Smarty | smarty-lint | Code Quality |
| Windows Batch Files (bat, cmd) | Blinter | Code Quality |
| Shopify | Shopify CLI | Code Quality |
| SQL | SQLFluff | Code Quality |
| SCSS | Stylelint | Code Quality |
| Stylus | Stylelint | Code Quality |
| SugarSS | Stylelint | Code Quality |
| Svelte | Biome, oxlint, ESLint | Code Quality |
| Swift | SwiftLint | Code Quality |
| Terraform | TFLint, Checkov, Trivy | Code Quality, Code Security |
| TSX | Biome, oxlint, ESLint | Code Quality |
| Typescript | Biome, oxlint, ESLint | Code Quality |
| Vue | Biome, oxlint, ESLint | Code Quality |
| YAML | YAMLlint, Checkov | Code Quality, Code Security |
| Prisma | Prisma Lint | Code Quality |
What’s next
Configuration reference
See every YAML configuration option for each supported tool.
Configure your repository
Learn how to set up and customize CodeRabbit for your repository.