Tool catalog

Browse all linters, security analyzers, and CI/CD tools supported by CodeRabbit.

Browse all third-party open-source linters, security analyzers, and CI/CD tools that CodeRabbit uses in code reviews. Click any tool name for its configuration guide.

Multipurpose tools

These tools run on many or all file types in your repository. They identify general bugs and security risks, including pattern-based and semantic code analysis, secret exposure, insecure dependencies, misconfigured infrastructure-as-code, and causes of failing CI/CD pipelines.

Tool	Category
ast-grep, OpenGrep, Semgrep	Code Quality, Code Security
Betterleaks, SkillSpector	Secret and Agent Skill Scanning
Microsoft Presidio Analyzer	PII detection
OSV-Scanner	Package Version Security
CI/CD Pipeline Analysis	CI/CD Generic User Configured
Checkov, Trivy	IaC Code Security
TruffleHog	Secret Scanning
oasdiff	API Compatibility

Tools by category

Category	Tools
Multipurpose	ast-grep, OpenGrep, Semgrep
Security	Betterleaks, SkillSpector, TruffleHog, Microsoft Presidio Analyzer, OSV-Scanner, Brakeman
Languages	ESLint, Biome, Oxlint, React Doctor, Ruff, Pylint, Flake8, golangci-lint, Clippy, RuboCop, SwiftLint, PHPStan, PHPMD, PHPCS, PMD, detekt, Clang-Tidy, Cppcheck, Infer, Luacheck, ShellCheck, Blinter, Fortitude, Regal, PSScriptAnalyzer, smarty-lint, SQLFluff, Prisma Lint, Stylelint, HTMLHint, ember-template-lint, YAMLlint, Dotenv Linter, Buf, oasdiff, checkmake, Shopify Theme Check
Infrastructure as code	Checkov, Trivy, TFLint, Hadolint
CI/CD	actionlint, zizmor, CircleCI, GitHub Checks, CI/CD Pipeline Analysis
API specifications	oasdiff
Docs and prose	markdownlint, LanguageTool

Tools by technology

The following tools are automatically selected and run based on the specific languages, file types, or frameworks detected in your repositories. CodeRabbit determines which tools to run depending on the contents of your codebase, recent changes, or the presence of relevant configuration files. Pipeline tools will only trigger based on platform or configured CircleCI integration.

Technology	Tools	Category
Astro	Biome, oxlint, ESLint	Code Quality
Azure ARM	Checkov, Trivy	Code Security
Azure DevOps Pipelines	CI/CD Pipeline Analysis	CI/CD Pipeline Analysis
CircleCI	CircleCI	Configuration Validation
CloudFormation	Checkov, Trivy	Code Security
C	Infer, Clang-Tidy, Cppcheck	Code Quality
C++	Infer, Clang-Tidy, Cppcheck	Code Quality
CSS	Biome, Stylelint, ESLint	Code Quality
Docker	Hadolint, Checkov, Trivy	Code Quality, Code Security
Docker Compose	Checkov, Trivy	Code Security
Environment Files (.env)	Dotenv Linter	Code Quality
Fortran	Fortitude	Code Quality
GraphQL	ESLint	Code Quality
GitHub Actions	actionlint, zizmor	Code Quality, Code Security, CI/CD Pipeline Analysis
GitLab Pipelines	CI/CD Pipeline Analysis	CI/CD Pipeline Analysis
Go	golangci-lint	Code Quality
Helm	Checkov, Trivy	Code Security
HTML	HTMLHint	Code Quality
Javascript	Biome, oxlint, ESLint, React Doctor	Code Quality
JSON, JSONC	Biome, Checkov	Code Quality
JSX	Biome, oxlint, ESLint, React Doctor	Code Quality
Kotlin	detekt	Code Quality
Kubernetes	Checkov, Trivy	Code Security
Less	Stylelint	Code Quality
Lua	Luacheck	Code Quality
Makefile	Checkmake	Code Quality
Markdown	markdownlint, LanguageTool	Code Quality, Grammar Checking
OpenAPI, Swagger	oasdiff	API Compatibility
PHP	PHPStan, PHPMD, PHPCS	Code Quality
Plaintext	LanguageTool	Grammar and Spell Checking
Java	Infer, PMD	Code Quality
Protobuf	Buf	Code Quality
Python	Ruff, Pylint, Flake8	Code Quality
Jupyter Notebooks	Ruff, Pylint, Flake8	Code Quality
React	React Doctor, ESLint, Biome, oxlint	Code Quality
Regal	Regal	Code Quality
OpenAPI	oasdiff	Code Quality
PowerShell	PSScriptAnalyzer	Code Quality
Ruby	RuboCop, Brakeman	Code Quality, Code Security
Rust	Clippy	Code Quality
Sass	Stylelint	Code Quality
Shell (sh, bash, ksh, dash)	ShellCheck	Code Quality
Smarty	smarty-lint	Code Quality
Windows Batch Files (bat, cmd)	Blinter	Code Quality
Shopify	Shopify Theme Check	Code Quality
SQL	SQLFluff	Code Quality
SCSS	Stylelint	Code Quality
Stylus	Stylelint	Code Quality
SugarSS	Stylelint	Code Quality
Svelte	Biome, oxlint, ESLint	Code Quality
Swift	SwiftLint	Code Quality
Terraform	TFLint, Checkov, Trivy	Code Quality, Code Security
TSX	Biome, oxlint, ESLint, React Doctor	Code Quality
Typescript	Biome, oxlint, ESLint, React Doctor	Code Quality
Vue	Biome, oxlint, ESLint	Code Quality
YAML	YAMLlint, Checkov	Code Quality, Code Security
Prisma	Prisma Lint	Code Quality

What’s next

Configuration reference

See every YAML configuration option for each supported tool.

Configure your repository

Learn how to set up and customize CodeRabbit for your repository.