List of supported tools

This is a list of the third-party open-source linters and security analysis tools that CodeRabbit uses to generate code reviews.

For more information about fine-tuning the CodeRabbit configuration of a tool, click that tool's name in the following list.

For an overview of how CodeRabbit uses these tools when generating code reviews, as well as general information about controlling their use, see Configure third-party tools.

Technology	Tools	Category
All	Gitleaks, Pipeline Remediation	Code Security, CI/CD
Azure DevOps Pipelines	Pipeline Remediation	CI/CD Failure Remediation
CircleCI	CircleCI, Pipeline Remediation	Configuration Validation, CI/CD Failure Remediation
CloudFormation	Checkov	Code Security
Cppcheck	Cppcheck	Code Quality
CSS	Biome	Code Quality
Docker	Hadolint, Checkov	Code Quality, Code Security
GitHub Actions	actionlint, Pipeline Remediation	Code Quality, CI/CD Failure Remediation
GitLab Pipelines	Pipeline Remediation	CI/CD Failure Remediation
Go	golangci-lint	Code Quality
Helm	Checkov	Code Security
Javascript	Biome, oxlint	Code Quality
JSON, JSONC	Biome	Code Quality
JSX	Biome, oxlint	Code Quality
Kotlin	detekt	Code Quality
Kubernetes	Checkov	Code Security
Markdown	markdownlint, LanguageTool	Code Quality, Grammar Checking
PHP	PHPStan	Code Quality
Plaintext	LanguageTool	Grammar and Spell Checking
Java	PMD	Code Quality
Protobuf	Buf	Code Quality
Python	Ruff	Code Quality
Regal	Regal	Code Quality
Ruby	RuboCop	Code Quality
Semgrep	Semgrep	Code Security
Shell (sh, bash, ksh, dash)	ShellCheck	Code Quality
Shopify	Shopify CLI	Code Quality
SQL	SQLFluff	Code Quality
Swift	SwiftLint	Code Quality
Terraform	Checkov	Code Security
TSX	Biome, oxlint	Code Quality
Typescript	Biome, oxlint	Code Quality
YAML	YAMLlint	Code Quality
Prisma	Prisma Lint	Code Quality