Multipurpose tools
These tools run on many or all file types in your repository. They identify general bugs and security risks, including pattern-based and semantic code analysis, secret exposure, insecure dependencies, misconfigured infrastructure-as-code, and causes of failing CI/CD pipelines.| Tool | Category |
|---|---|
| ast-grep, OpenGrep, Semgrep | Code Quality, Code Security |
| Gitleaks | Secret Scanning |
| OSV-Scanner | Package Version Security |
| Pipeline Remediation | CI/CD Generic User Configured |
| Checkov, Trivy | IaC Code Security |
| TruffleHog | Secret Scanning |
Tools by technology
The following tools are automatically selected and run based on the specific languages, file types, or frameworks detected in your repositories. CodeRabbit determines which tools to run depending on the contents of your codebase, recent changes, or the presence of relevant configuration files. Pipeline tools will only trigger based on platform or configured CircleCI integration.| Technology | Tools | Category |
|---|---|---|
| Astro | Biome, oxlint, ESLint | Code Quality |
| Azure ARM | Checkov, Trivy | Code Security |
| Azure DevOps Pipelines | Pipeline Remediation | CI/CD Failure Remediation |
| CircleCI | CircleCI, Pipeline Remediation | Configuration Validation, CI/CD Failure Remediation |
| CloudFormation | Checkov, Trivy | Code Security |
| Cppcheck | Cppcheck | Code Quality |
| Clang | Clang-Tidy | Code Quality |
| CSS | Biome, Stylelint, ESLint | Code Quality |
| Docker | Hadolint, Checkov, Trivy | Code Quality, Code Security |
| Docker Compose | Checkov, Trivy | Code Security |
| Environment Files (.env) | Dotenv Linter | Code Quality |
| Fortran | Fortitude | Code Quality |
| GraphQL | ESLint | Code Quality |
| GitHub Actions | actionlint, Pipeline Remediation | Code Quality, CI/CD Failure Remediation |
| GitLab Pipelines | Pipeline Remediation | CI/CD Failure Remediation |
| Go | golangci-lint | Code Quality |
| Helm | Checkov, Trivy | Code Security |
| HTML | HTMLHint | Code Quality |
| Javascript | Biome, oxlint, ESLint | Code Quality |
| JSON, JSONC | Biome, Checkov | Code Quality |
| JSX | Biome, oxlint, ESLint | Code Quality |
| Kotlin | detekt | Code Quality |
| Kubernetes | Checkov, Trivy | Code Security |
| Less | Stylelint | Code Quality |
| Lua | Luacheck | Code Quality |
| Makefile | Checkmake | Code Quality |
| Markdown | markdownlint, LanguageTool | Code Quality, Grammar Checking |
| PHP | PHPStan, PHPMD, PHPCS | Code Quality |
| Plaintext | LanguageTool | Grammar and Spell Checking |
| Java | PMD | Code Quality |
| Protobuf | Buf | Code Quality |
| Python | Ruff, Pylint, Flake8 | Code Quality |
| Jupyter Notebooks | Ruff, Pylint, Flake8 | Code Quality |
| Regal | Regal | Code Quality |
| Ruby | RuboCop, Brakeman | Code Quality, Code Security |
| Rust | Clippy | Code Quality |
| Sass | Stylelint | Code Quality |
| Shell (sh, bash, ksh, dash) | ShellCheck | Code Quality |
| Windows Batch Files (bat, cmd) | Blinter | Code Quality |
| Shopify | Shopify CLI | Code Quality |
| SQL | SQLFluff | Code Quality |
| SCSS | Stylelint | Code Quality |
| Stylus | Stylelint | Code Quality |
| SugarSS | Stylelint | Code Quality |
| Svelte | Biome, oxlint, ESLint | Code Quality |
| Swift | SwiftLint | Code Quality |
| Terraform | TFLint, Checkov, Trivy | Code Quality, Code Security |
| TSX | Biome, oxlint, ESLint | Code Quality |
| Typescript | Biome, oxlint, ESLint | Code Quality |
| Vue | Biome, oxlint, ESLint | Code Quality |
| YAML | YAMLlint, Checkov | Code Quality, Code Security |
| Prisma | Prisma Lint | Code Quality |