Download Latest Version v6.29.0 source code.zip (13.2 MB)
Email in envelope

Get an email when there's a new version of CodeChecker

Home / v6.29.0
Name Modified Size InfoDownloads / Week
Parent folder
README.md 2026-09-08 18.2 kB
0
v6.29.0 source code.tar.gz 2026-09-08 12.2 MB
0
v6.29.0 source code.zip 2026-09-08 13.2 MB
4 4 weekly downloads
Totals: 3 Items   25.5 MB 4

Highlights :star2:

:exclamation: Backward incompatible changes

  1. The gcc static analayzer checkers are renamed from gcc-<checker_name> to gcc-analyzer-<checker_name> e.g. gcc-out-of-bounds -> gcc-analyzer-out-of-bounds (https://github.com/Ericsson/codechecker/pull/5056)
  2. CodeChecker analyze --z3 flag has been removed as the Z3 constraint solver is unsupported by Clang Static Analyzer. Z3 for refutation still can be used. https://github.com/Ericsson/codechecker/pull/5055
  3. The deprecated CodeChecker analyze --tidy-config flag has been removed https://github.com/Ericsson/codechecker/pull/4972 CodeChecker analyze --analyzer-option clang-tidy:take-config-from-directory=true can be used instead.

New File Tree view

The new file tree view shows how the reports are distributed within files and directories. One can find the hot-spots, problematic files with the most reports. You can filter paths with wildcards, sort them by severity or review status, and pick paths with checkboxes. The tree opens up to the first folder that branches. The view mode and the set of open folders are saved in the URL, so a shared link shows the same view.

Redesigned file tree view

GCC compiler warnings as checkers

Any -W GCC warning can now be turned on and reported like a normal checker, so compiler warnings show up next to the other analyzer results. (https://github.com/Ericsson/codechecker/pull/5056)

OWASP Top 10 (2025), CWE Top 25 (2025) and CWE vulnerabilities guidelines

New security guidelines were added, along with their rule and CWE mappings. They show up directly in the guideline statistics.

OWASP Top 10 guideline statistics

Richer SARIF output from parse

CodeChecker parse now writes a more complete SARIF file. It includes suppression and review-status information and full rule details, and it lists all review statuses by default. The report-converter now also respects --trim-path-prefix when it exports SARIF.

Analysis configuration stored with the run and shown in the GUI

The skip file and other config files used for a run are now saved with the run and shown in the reworked analysis information dialog.

Analysis configuration in the analysis information dialog

Redesigned report info page

The report info page is now split into clear cards: run and report information, analyzer and checker details, file and location, bug path length and severity, detection and review status, and detection and fix dates. Values like the run name, report hash, file path, checker and analyzer name link straight to the matching filtered reports.

Redesigned report info page

More readable report steps

Long step messages in a bug path now wrap onto several lines, and step boxes are colored by type (error, fixit, macro, note). A review-status change is also marked more prominently.

Improved statistics pages

The statistics pages have a cleaner layout, a single-select guideline picker, and colors that are easier to read. Checkers that are missing from the selected runs are now shown as disabled instead of stopping the whole page from loading.

New memory-safety reporting tool

A script tool bundles a run's findings, checker details, and analyzer configuration into one archive with a checksum.

The tool needs only the report directory to run but other optional arguments can also be used.

Running the tool: memory-safety-reporter -o MemorySafetyReport -r /path/to/report/directory

(https://github.com/Ericsson/codechecker/pull/4962)

Faster, cleaner command-line output

The human-readable command-line output now uses tables that fit the terminal width (using the new prettytable library). Analyzers are ordered so the slower ones start first, and you can now run the CLI as lowercase codechecker.

Select and compare multiple runs

The run filter toolbar was reworked to support selecting several runs at once. (https://github.com/Ericsson/codechecker/pull/4895)

Personal Access Token improvements

Personal Access Tokens now save their creation date, and you get a clear error when a token has expired.

Analysis engine, checkers and database

Web UI and server :computer:

Performance and server improvements :rocket:

Bug fixes :bug:

Documentation :scroll:

Dependencies, CI and Docker :package:

New Contributors

Full Changelog: https://github.com/Ericsson/codechecker/compare/v6.28.0...6.29.0

Source: README.md, updated 2026-09-08