Multipurpose tools
These tools run on many or all file types in your repository. They identify general bugs and security risks, including pattern-based and semantic code analysis, secret exposure, insecure dependencies, misconfigured infrastructure-as-code, and causes of failing CI/CD pipelines.| Tool | Category |
|---|---|
| ast-grep, OpenGrep, Semgrep | Code Quality, Code Security |
| Betterleaks | Secret Scanning |
| OSV-Scanner | Package Version Security |
| CI/CD Pipeline Analysis | CI/CD Generic User Configured |
| Checkov, Trivy | IaC Code Security |
| TruffleHog | Secret Scanning |
Tools by technology
The following tools are automatically selected and run based on the specific languages, file types, or frameworks detected in your repositories. CodeRabbit determines which tools to run depending on the contents of your codebase, recent changes, or the presence of relevant configuration files. Pipeline tools will only trigger based on platform or configured CircleCI integration.| Technology | Tools | Category |
|---|---|---|
| Astro | Biome, oxlint, ESLint | Code Quality |
| Azure ARM | Checkov, Trivy | Code Security |
| Azure DevOps Pipelines | CI/CD Pipeline Analysis | CI/CD Pipeline Analysis |
| CircleCI | CircleCI | Configuration Validation |
| CloudFormation | Checkov, Trivy | Code Security |
| Cppcheck | Cppcheck | Code Quality |
| Clang | Clang-Tidy | Code Quality |
| CSS | Biome, Stylelint, ESLint | Code Quality |
| Docker | Hadolint, Checkov, Trivy | Code Quality, Code Security |
| Docker Compose | Checkov, Trivy | Code Security |
| Environment Files (.env) | Dotenv Linter | Code Quality |
| Fortran | Fortitude | Code Quality |
| GraphQL | ESLint | Code Quality |
| GitHub Actions | actionlint | Code Quality, CI/CD Pipeline Analysis |
| GitLab Pipelines | CI/CD Pipeline Analysis | CI/CD Pipeline Analysis |
| Go | golangci-lint | Code Quality |
| Helm | Checkov, Trivy | Code Security |
| HTML | HTMLHint | Code Quality |
| Javascript | Biome, oxlint, ESLint | Code Quality |
| JSON, JSONC | Biome, Checkov | Code Quality |
| JSX | Biome, oxlint, ESLint | Code Quality |
| Kotlin | detekt | Code Quality |
| Kubernetes | Checkov, Trivy | Code Security |
| Less | Stylelint | Code Quality |
| Lua | Luacheck | Code Quality |
| Makefile | Checkmake | Code Quality |
| Markdown | markdownlint, LanguageTool | Code Quality, Grammar Checking |
| PHP | PHPStan, PHPMD, PHPCS | Code Quality |
| Plaintext | LanguageTool | Grammar and Spell Checking |
| Java | PMD | Code Quality |
| Protobuf | Buf | Code Quality |
| Python | Ruff, Pylint, Flake8 | Code Quality |
| Jupyter Notebooks | Ruff, Pylint, Flake8 | Code Quality |
| Regal | Regal | Code Quality |
| PowerShell | PSScriptAnalyzer | Code Quality |
| Ruby | RuboCop, Brakeman | Code Quality, Code Security |
| Rust | Clippy | Code Quality |
| Sass | Stylelint | Code Quality |
| Shell (sh, bash, ksh, dash) | ShellCheck | Code Quality |
| Smarty | smarty-lint | Code Quality |
| Windows Batch Files (bat, cmd) | Blinter | Code Quality |
| Shopify | Shopify CLI | Code Quality |
| SQL | SQLFluff | Code Quality |
| SCSS | Stylelint | Code Quality |
| Stylus | Stylelint | Code Quality |
| SugarSS | Stylelint | Code Quality |
| Svelte | Biome, oxlint, ESLint | Code Quality |
| Swift | SwiftLint | Code Quality |
| Terraform | TFLint, Checkov, Trivy | Code Quality, Code Security |
| TSX | Biome, oxlint, ESLint | Code Quality |
| Typescript | Biome, oxlint, ESLint | Code Quality |
| Vue | Biome, oxlint, ESLint | Code Quality |
| YAML | YAMLlint, Checkov | Code Quality, Code Security |
| Prisma | Prisma Lint | Code Quality |