CodeRabbit Documentation - AI code reviews on pull requests, IDE, and CLI

actionlint

actionlint is a static checker for GitHub Actions workflow files.

Configuration options:

boolean

Enable actionlint | actionlint is a static checker for GitHub Actions workflow files. | v1.7.12Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    actionlint:
      enabled: true

ast-grep

Enable ast-grep | ast-grep is a code analysis tool that helps you to find patterns in your codebase using abstract syntax trees patterns. | v0.45.0

Configuration options:

array of string

List of rules directories.Defaults to [].

array of string

List of utils directories.Defaults to [].

boolean

Use ast-grep essentials package.Defaults to true.

array of string

Predefined packages to be used.Defaults to [].

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    ast-grep:
      rule_dirs: []
      util_dirs: []
      essential_rules: true
      packages: []

Biome

Biome is a fast formatter, linter, and analyzer for web projects.

Configuration options:

boolean

Enable Biome | Biome is a fast formatter, linter, and analyzer for web projects. | Enable Biome integration. | v2.5.6Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    biome:
      enabled: true

Blinter

Blinter is a linter for Windows batch files that provides comprehensive static analysis to identify syntax errors, security vulnerabilities, performance issues, and style problems.

Configuration options:

boolean

Enable Blinter | Blinter is a linter for Windows batch files that provides comprehensive static analysis to identify syntax errors, security vulnerabilities, performance issues, and style problems. | v1.0.113Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    blinter:
      enabled: true

Brakeman

Brakeman is a static analysis security vulnerability scanner for Ruby on Rails applications. | v8.0.5

Configuration options:

boolean

Enable Brakeman | Brakeman is a static analysis security vulnerability scanner for Ruby on Rails applications. | v8.0.5Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    brakeman:
      enabled: true

Buf

Buf offers linting for Protobuf files.

Configuration options:

boolean

Enable Buf | Buf offers linting for Protobuf files. | v1.72.0Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    buf:
      enabled: true

checkmake

checkmake is a linter for Makefiles.

Configuration options:

boolean

Enable checkmake | checkmake is a linter for Makefiles. | v0.3.2Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    checkmake:
      enabled: true

Checkov

Checkov is a static code analysis tool for infrastructure-as-code files.

Configuration options:

boolean

Enable Checkov | Checkov is a static code analysis tool for infrastructure-as-code files. | v3.3.9Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    checkov:
      enabled: true

CircleCI

CircleCI tool is a static checker for CircleCI config files.

Configuration options:

boolean

Enable CircleCI | CircleCI tool is a static checker for CircleCI config files. | v0.1.38646Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    circleci:
      enabled: true

Clang

Configuration for Clang to perform static analysis on C and C++ code

Configuration options:

boolean

Enable Clang for C/C++ static analysis and code quality checks | v14.0.6Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    clang:
      enabled: true

Clippy

Clippy is a collection of lints to catch common mistakes and improve your Rust code.

Configuration options:

boolean

Enable Clippy | Clippy is a collection of lints to catch common mistakes and improve your Rust code. | Enable Clippy integration.Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    clippy:
      enabled: true

Cppcheck

Cppcheck is a static code analysis tool for the C and C++ programming languages.

Configuration options:

boolean

Enable Cppcheck | Cppcheck is a static code analysis tool for the C and C++ programming languages. | v2.21.0Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    cppcheck:
      enabled: true

detekt

Detekt is a static code analysis tool for Kotlin files.

Configuration options:

boolean

Enable detekt | detekt is a static code analysis tool for Kotlin files. | v1.23.8Defaults to true.

string

Optional path to the detekt configuration file relative to the repository.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    detekt:
      enabled: true
      config_file: "detekt.yml"

Dotenv Lint

dotenv-linter is a tool for checking and fixing .env files for problems and best practices

Configuration options:

boolean

Enable dotenv-linter | dotenv-linter is a tool for checking and fixing .env files for problems and best practices | v4.0.0Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    dotenvLint:
      enabled: true

Ember Template Lint

ember-template-lint is a linter for Handlebars template files that checks for common issues such as accessibility violations, deprecated patterns, and template anti-patterns.

Configuration options:

boolean

Enable ember-template-lint | ember-template-lint is a linter for Handlebars template files that checks for common issues such as accessibility violations, deprecated patterns, and template anti-patterns. | v7.9.3Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    emberTemplateLint:
      enabled: true

ESLint

ESLint is a static code analysis tool for JavaScript files.

Configuration options:

boolean

Enable ESLint | ESLint is a static code analysis tool for JavaScript files.Defaults to true.

object

@e18e/eslint-plugin modernization, performance, and dependency replacement checks.Defaults to {}.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    eslint:
      enabled: true
      e18e: {}

Flake8

Flake8 is a Python linter that wraps PyFlakes, pycodestyle and Ned Batchelder’s McCabe script.

Configuration options:

boolean

Enable Flake8 | Flake8 is a Python linter that wraps PyFlakes, pycodestyle and Ned Batchelder’s McCabe script. | v7.3.0Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    flake8:
      enabled: true

Fortitude

Fortitude is a Fortran linter that checks for code quality and style issues.

Configuration options:

boolean

Enable Fortitude | Fortitude is a Fortran linter that checks for code quality and style issues | v0.9.2Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    fortitudeLint:
      enabled: true

GitHub Checks

GitHub Checks integration configuration.

Configuration guide

Configuration options:

boolean

Enable GitHub Checks | Enable integration, defaults to true | Enable GitHub Checks integration.Defaults to true.

number

Time in milliseconds to wait for all GitHub Checks to conclude. Default 90 seconds, max 15 minutes (900000ms).Defaults to 90000.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    github-checks:
      enabled: true
      timeout_ms: 90000

Gitleaks

Betterleaks is a secret scanner (an improved version of Gitleaks).

Configuration options:

boolean

Enable Betterleaks | Betterleaks is a secret scanner (an improved version of Gitleaks). | Enable Betterleaks integration. | v1.7.3Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    gitleaks:
      enabled: true

golangci-lint

golangci-lint is a fast linters runner for Go.

Configuration options:

boolean

Enable golangci-lint | golangci-lint is a fast linters runner for Go. | Enable golangci-lint integration. | v2.12.2Defaults to true.

string

Optional path to the golangci-lint configuration file relative to the repository. Useful when the configuration file is named differently than the default ‘.golangci.yml’, ‘.golangci.yaml’, ‘.golangci.toml’, ‘.golangci.json’.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    golangci-lint:
      enabled: true
      config_file: ".golangci.yml"

Hadolint

Hadolint is a Dockerfile linter.

Configuration options:

boolean

Enable Hadolint | Hadolint is a Dockerfile linter. | Enable Hadolint integration. | v2.15.1Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    hadolint:
      enabled: true

HTMLHint

HTMLHint is a static code analysis tool for HTML files.

Configuration options:

boolean

Enable HTMLHint | HTMLHint is a static code analysis tool for HTML files. | Enable HTMLHint integration. | v1.9.2Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    htmlhint:
      enabled: true

Infer

Configuration for Infer to find bugs in Java and C/C++ code

Configuration options:

boolean

Enable Infer for static bug analysis in Java and C/C++ code | v1.3.0Defaults to true.

boolean

Enable Java analysis | Disabled by default because Java analysis may require compiling more than the changed files.Defaults to false.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    fbinfer:
      enabled: true

LanguageTool

LanguageTool is a style and grammar checker for 30+ languages.

Configuration options:

boolean

Enable LanguageTool | Enable LanguageTool integration.Defaults to true.

array of string

IDs of rules to be enabled. The rule won’t run unless ‘level’ is set to a level that activates the rule.Defaults to [].

array of string

IDs of rules to be disabled. Note: EN_UNPAIRED_BRACKETS, and EN_UNPAIRED_QUOTES are always disabled.Defaults to [].

array of string

IDs of categories to be enabled.Defaults to [].

array of string

IDs of categories to be disabled. Note: TYPOS, TYPOGRAPHY, and CASING are always disabled.Defaults to [].

boolean

Only the rules and categories whose IDs are specified with ‘enabledRules’ or ‘enabledCategories’ are enabled.Defaults to false.

enum

If set to ‘picky’, additional rules will be activated, i.e. rules that you might only find useful when checking formal text.One of: default, pickyDefaults to "default".

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    languagetool:
      enabled: true
      enabled_rules: []
      disabled_rules: []
      enabled_categories: []
      disabled_categories: []
      level: "default"

Luacheck

Configuration for Lua code linting to ensure code quality

Configuration options:

boolean

Enable Lua code linting | Luacheck helps maintain consistent and error-free Lua code | v1.2.0Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    luacheck:
      enabled: true

markdownlint

markdownlint-cli2 is a static analysis tool to enforce standards and consistency for Markdown files.

Configuration options:

boolean

Enable markdownlint | markdownlint-cli2 is a static analysis tool to enforce standards and consistency for Markdown files. | Enable markdownlint integration. | v0.23.2Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    markdownlint:
      enabled: true

oasdiff

oasdiff detects breaking changes between OpenAPI specifications.

Configuration options:

boolean

Enable oasdiff | oasdiff detects breaking changes between OpenAPI specifications. | v1.27.0Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    oasdiff:
      enabled: true

OpenGrep

OpenGrep is a high-performance static code analysis engine, compatible with Semgrep configurations.

Configuration options:

boolean

Enable OpenGrep | OpenGrep is a high-performance static code analysis engine for finding security vulnerabilities and bugs across 17+ languages. | v1.26.0Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    opengrep:
      enabled: true

OSV Scanner

OSV Scanner is a tool for vulnerability package scanning.

Configuration options:

boolean

Enable OSV Scanner | OSV Scanner is a tool for vulnerability package scanning | v2.4.0Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    osvScanner:
      enabled: true

Oxlint

Oxlint is a JavaScript/TypeScript linter for OXC written in Rust.

Configuration options:

boolean

Enable Oxlint | Oxlint is a JavaScript/TypeScript linter for OXC written in Rust. | v1.76.0Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    oxc:
      enabled: true

PHP CodeSniffer

PHP CodeSniffer is a PHP linter and coding standard checker.

Configuration options:

boolean

Enable PHP CodeSniffer | PHP CodeSniffer is a PHP linter and coding standard checker. | v3.7.2Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    phpcs:
      enabled: true

PHPMD

PHPMD is a tool to find potential problems in PHP code.

Configuration options:

boolean

Enable PHPMD | PHPMD is a tool to find potential problems in PHP code. | v2.15.0Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    phpmd:
      enabled: true

PHPStan

PHPStan is a tool to analyze PHP code.

Configuration options:

boolean

Enable PHPStan | PHPStan requires config file in your repository root. Please ensure that this file contains the paths: parameter. | v2.2.7Defaults to true.

enum

Level | Specify the rule level to run. When set to default, the level is determined by the review profile: chill uses level 3 (real bugs only — return/property type mismatches, array offset errors) and assertive uses level 8 (adds dead code detection, argument type checking, null safety, and typehint checks). This setting is ignored if your configuration file already has a level: parameter.One of: 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, default, maxDefaults to "default".

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    phpstan:
      enabled: true
      level: "default"

PMD

PMD is an extensible multilanguage static code analyzer. It’s mainly concerned with Java.

Configuration options:

boolean

Enable PMD | PMD is an extensible multilanguage static code analyzer. It’s mainly concerned with Java. | v7.26.0Defaults to true.

string

Optional path to the PMD configuration file relative to the repository.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    pmd:
      enabled: true
      config_file: "ruleset.xml"

Presidio

Microsoft Presidio Analyzer 2.2.364 detects sensitive identifiers (including payment cards, US SSN, cryptocurrency wallets, and phone numbers) in changed files. Tune entities, thresholds, and languages in repository Presidio configuration (for example .presidiocli or AnalyzerEngineProvider YAML); the built-in scan uses fixed defaults and is skipped when that configuration is present.

Configuration options:

boolean

Enable Microsoft Presidio Analyzer for high-signal PII in changed files | v2.2.364Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    presidio:
      enabled: true

Prisma Lint

Configuration for Prisma Schema linting to ensure schema file quality

Configuration options:

boolean

Enable Prisma Schema linting | Prisma Schema linting helps maintain consistent and error-free schema files | v0.13.1Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    prismaLint:
      enabled: true

PSScriptAnalyzer

PSScriptAnalyzer is a static code checker for PowerShell scripts and modules.

Configuration options:

boolean

Enable PSScriptAnalyzer | PSScriptAnalyzer is a static code checker for PowerShell scripts and modules. | v1.25.0Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    psscriptanalyzer:
      enabled: true

Pylint

Pylint is a Python static code analysis tool.

Configuration options:

boolean

Enable Pylint | Pylint is a Python static code analysis tool. | v4.0.6Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    pylint:
      enabled: true

React Doctor

React Doctor scans React codebases for security, performance, correctness, and accessibility issues.

Configuration options:

boolean

Enable React Doctor | React Doctor scans React codebases for security, performance, correctness, and accessibility issues. | v0.9.3Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    reactDoctor:
      enabled: true

Regal

Regal is a linter and language server for Rego.

Configuration options:

boolean

Enable Regal | Regal is a linter and language server for Rego. | v0.42.0Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    regal:
      enabled: true

RuboCop

RuboCop is a Ruby static code analyzer (a.k.a. linter ) and code formatter.

Configuration options:

boolean

Enable RuboCop | RuboCop is a Ruby static code analyzer (a.k.a. linter ) and code formatter. | v1.88.2Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    rubocop:
      enabled: true

Ruff

Ruff is a Python linter and code formatter.

Configuration options:

boolean

Enable Ruff | Ruff is a Python linter and code formatter. | Enable Ruff integration. | v0.16.1Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    ruff:
      enabled: true

Semgrep

Semgrep is a static analysis tool designed to scan code for security vulnerabilities and code quality issues.

Configuration options:

boolean

Enable Semgrep | Semgrep is a static analysis tool designed to scan code for security vulnerabilities and code quality issues. | Enable Semgrep integration. | v1.170.0Defaults to true.

string

Optional path to the Semgrep configuration file relative to the repository.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    semgrep:
      enabled: true
      config_file: ".semgrep.yml"

ShellCheck

ShellCheck is a static analysis tool that finds bugs in your shell scripts.

Configuration options:

boolean

Enable ShellCheck | ShellCheck is a static analysis tool that finds bugs in your shell. | Enable ShellCheck integration. | v0.11.0Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    shellcheck:
      enabled: true

Shopify Theme Check

Configuration for Shopify Theme Check to ensure theme quality and best practices

Configuration options:

boolean

Enable Shopify Theme Check | A linter for Shopify themes that helps you follow Shopify theme & Liquid best practices | cli 4.1.0 | theme 3.58.2Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    shopifyThemeCheck:
      enabled: true

SkillSpector

SkillSpector is a security scanner for AI agent skills that detects vulnerabilities, malicious patterns, and security risks

Configuration options:

boolean

Enable SkillSpector | SkillSpector is a security scanner for AI agent skills. It detects vulnerabilities, malicious patterns, and security risks in SKILL.md manifests and MCP configurations. | v2.5.1Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    skillspector:
      enabled: true

Smarty Lint

smarty-lint is a linter for Smarty 3 template files that checks for common issues such as incorrect operator usage, naming conventions, empty blocks, and unquoted strings.

Configuration options:

boolean

Enable smarty-lint | smarty-lint is a linter for Smarty 3 template files that checks for common issues such as incorrect operator usage, naming conventions, empty blocks, and unquoted strings. | v0.3.3Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    smartyLint:
      enabled: true

SQLFluff

SQLFluff is an open source, dialect-flexible and configurable SQL linter.

Configuration options:

boolean

Enable SQLFluff | SQLFluff is an open source, dialect-flexible and configurable SQL linter. | v4.2.2Defaults to true.

string

Optional path to the SQLFluff configuration file relative to the repository. Use this when the config file is not named one of SQLFluff’s default filenames.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    sqlfluff:
      enabled: true
      config_file: "custom/.sqlfluff"

Squawk

Configuration for Squawk to lint Postgres migrations and SQL for safe schema changes

Configuration options:

boolean

Enable Squawk for Postgres migration linting | Detects unsafe schema changes that can cause downtime or blocking locks | v2.61.0Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    squawk:
      enabled: true

Stylelint

Stylelint is a linter for stylesheets (CSS, SCSS, Sass, Less, SugarSS, Stylus) that helps avoid errors and enforce conventions.

Configuration options:

boolean

Enable Stylelint | Stylelint is a linter for stylesheets (CSS, SCSS, Sass, Less, SugarSS, Stylus) that helps avoid errors and enforce conventions. | Enable Stylelint integration. | v17.14.0Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    stylelint:
      enabled: true

SwiftLint

SwiftLint integration configuration object.

Configuration options:

boolean

Enable SwiftLint | SwiftLint is a Swift linter. | Enable SwiftLint integration. | v0.65.0Defaults to true.

string

Optional path to the SwiftLint configuration file relative to the repository. This is useful when the configuration file is named differently than the default ‘.swiftlint.yml’ or ‘.swiftlint.yaml’.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    swiftlint:
      enabled: true
      config_file: ".swiftlint.yml"

TFLint

TFLint is a Terraform linter for finding potential errors and enforcing best practices.

Configuration options:

boolean

Enable TFLint | TFLint is a Terraform linter for finding potential errors. | v0.64.0Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    tflint:
      enabled: true

Trivy

Trivy is a comprehensive security scanner that detects misconfigurations and secrets in Infrastructure as Code files

Configuration options:

boolean

Enable Trivy for security scanning of IaC files (Terraform, Kubernetes, Docker, etc.) | v0.72.0Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    trivy:
      enabled: true

TruffleHog

TruffleHog is a secret scanner with verification capabilities that can detect and verify secrets in code.

Configuration options:

boolean

Enable TruffleHog | TruffleHog is a secret scanner with verification capabilities. | Enable TruffleHog integration. | v3.96.0Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    trufflehog:
      enabled: true

YAMLlint

YAMLlint is a linter for YAML files.

Configuration options:

boolean

Enable YAMLlint | YAMLlint is a linter for YAML files. | Enable YAMLlint integration. | v1.37.1Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    yamllint:
      enabled: true

zizmor

zizmor is a static security analyzer for GitHub Actions workflow files.

Configuration options:

boolean

Enable zizmor | zizmor is a static security analyzer for GitHub Actions workflow files. | v1.29.0Defaults to true.

Example configuration:

.coderabbit.yaml

reviews:
  tools:
    zizmor:
      enabled: true

Platform

Getting Started

Pull Request Reviews

Available actions

Pre-Merge Checks

Post-Merge Actions

Security

Finishing touches

Knowledge Base

Security

Configuration

Tools

CodeRabbit Plan

Issue Management

Resources

Tools configuration reference

All tools

What’s next

Configuration reference

Review commands

​All tools

​What’s next

Configuration reference

Review commands

All tools

What’s next