Codacy Reviews & Product Details

This tool it's easy to integrate with our code repository app and it's new security dashboard and vulnerability management its pretty useful to get insights and metrics of our company. Also, the support team is really helpful and provides immediate assistance. Review collected by and hosted on G2.com.

I haven’t found anything to dislike about Codacy. Review collected by and hosted on G2.com.

I enjoy the quality gates, although this could probably be done with other tools in the dev pipeline, it's a nice integrated automation ready out of the box, easy to use as well. The static code analyses are also helpful and keep your code clean and safe. Review collected by and hosted on G2.com.

It is a bit expensive at $19/month, especially for smaller organizations Review collected by and hosted on G2.com.

I've used codacy for about an year now and I can say that it has been an amazing experience till now.

The intended purpose to onboard Codacy as the code quality and security analysis tool has been fulfilled. My team's overall code quality has improved significantly by using codacy. We have extensively used it to fix syntaxes, detect and remove hardcodings, and improve any redundancy in the code.

In addition to code quality, its integration with pull requests and project management tools such as Jira has helped me to manage code reviews and quality efficiently. Review collected by and hosted on G2.com.

Codacay is an amazing tool but here are some nitpicking improvements that can be implemented:

-Running code analysis on large databases sometimes takes a longer time or gets stuck and requires reanalysis.

-A little more flexibility in customizing our own rules tailored specifically to the project needs won't harm. Review collected by and hosted on G2.com.

From the point of view of a company that processes card transactions and is subject to Compliance/Certifications with card scheme standards, automated code review and detection of security problems is the most useful thing. Codacy helps developers save time in code reviews, so developers can focus on other things. Codacy centralizes customizable code patterns and enforces them within engineering teams so that everyone's code goes through static analysis and is evaluated before being put into production. Easy integration with GitLab. Customer Support is of high quality, responds quickly to inquiries, always helps us as much as possible. Review collected by and hosted on G2.com.

Codacy works on the RHEL operating system but has no official support for RHEL, regardless of that the customer support always helps us as much as possible but some things we have to find a way to solve them ourselves. Viewing GitLab-tagged code on Codacy is a functionality that would be of great use to us, but currently does not exist. Review collected by and hosted on G2.com.

The high number of programming languages that are supported by Codacy helped a lot in our situation, once we had different tech stacks. It was also very easy to integrate with our CI/CD flows, and we are seeing a really cool product roadmap. Review collected by and hosted on G2.com.

In our situation, we had several different tech stacks on our repos, and some features from Codacy weren't supporting us properly. That kinds of things are always discussed with our CS teams and prioritized on their product backlog. Review collected by and hosted on G2.com.

I like how Codacy works to build strong partnerships with its customers. I like the focus on developers and the developer experience. I like that Codacy gives me a hassle-free single pane of glass view into code quality across my organization. Review collected by and hosted on G2.com.

As a growing product, there are some minor UX things or features I'd like. You have to notice the chat icon in the bottom-right to get support. There's no "Support" link in the top navbar like most other sites. As a European-based company, getting support after ~12pm Eastern on a Friday can be challenging. Luckily we've had few occasions where we needed to do this. Review collected by and hosted on G2.com.

The Codacy team follows up and ensures that we are getting the most out of the platform. My team members consider it crucial to the success of our projects. It is quite easy to integrate and does its job without human interaction. Review collected by and hosted on G2.com.

I would like to see them expand into more features such as dependency scanning for vulnerable or unsupported versions of libraries they depend on. Review collected by and hosted on G2.com.

Codacy's integration with our continuous integration and continuous delivery workflow (CICD ) and with third party technologies like Slack , provides us with real time notifications on our code either as pull request commands or as Slack comments , ensuring that we avoid critical code vulnerabilities, that potentially affects our developed software.

Codacy makes configuration of code analysis rules , to be saved as configuration files . The major benefit of this , is that we are able to tweak our code analysis rules to future needs, by simply editing the saved configuration file documentation as against configuring the entire Codacy setup from scratch everytime we need it for a new project. Review collected by and hosted on G2.com.

Codacy does not allow for me to analyze my code locally , before submitting a commit. Also, Codacy's lack of support for the Java library - Lombok , is a point of reservation for me, as it makes some recommendations made by codacy to be unapplicable for projects where we deploy Java as our server side language. Review collected by and hosted on G2.com.

I have used Codacy for various projects, both in closed and open source development. I found Codacy to be a very flexible tool for ensuring common coding standards and detecting possible code issues early.

- Support for a large variety of programming and markup languages. Even medium-sized projects quickly use a multitude of languages. For example, in addition to the project's primary programming languages, there might be parts written in, e.g., C or JavaScript; the build makes use of Makefiles or shell scripts; the configuration is provided in XML or JSON; infrastructure is configured with Docker and Terraform etc. Codacy allows me to monitor code quality for all these parts of an application in one place.

- Flexible configuration by using configuration files. While you can also configure the tools in the Codacy UI, it allows you to have the rules for code analysis saved in configuration files as part of the analyzed project. That enables the team to easily adjust the rules to their needs while having the configuration versions controlled and documented.

- Integration into your CI workflow: I have used Codacy with both GitHub and Gitlab. The integration into the CI process gives instant feedback to developers and allows the team to ensure that only validated code makes it into the project. Review collected by and hosted on G2.com.

Due to many supported languages, the detailed configuration of the rules can require some research. Here Codacy could improve the process by linking to the relevant documentation for the corresponding configuration file. Review collected by and hosted on G2.com.

I'm an open source project maintainer. Given that I'm already donating thousands of hours of my time on my project, I absolutely love products which offer their tools free to Open Source projects. There are a variety of CI tools available, and no one tool checks every box, but Codacy is one that is really helpful to include. The most helpful feature for me is pull request integration; it notices issues and prompts authors to fix them before I even get a chance to review! It also has the most useful "duplicate detection" algorithms of any of the CI tools I've used, enabling me to refactor and simplify code. Review collected by and hosted on G2.com.

It is immensely configurable as to choosing what patterns to look for, but the categories are very broad so there are still hundreds of rules to try to sort through and activate. A narrower classification than "error prone" would help me methodically review and fine tune my rules rather than trusting "add all" and eliminating the false positives. Review collected by and hosted on G2.com.