Best Code Quality Tools for Linux

Ship quality code, faster. Aikido built AI-native code quality, with instant feedback, smart detection, and clear auto-generated PR comments, so you can focus on building.

Kiuwan is an end-to-end application security platform that integrates seamlessly into your development process. Our toolset includes Static Application Security Testing (SAST), Software Composition Analysis (SCA), Software Governance and Code Quality, empowering your team to quickly identify and remediate vulnerabilities. Integrating into your CI/CD pipeline, Kiuwan enables early detection and remediation of security issues. Kiuwan supports strict compliance with industry standards including OWASP, CWE, MISRA, NIST, PCI DSS, and CERT, among others. ✅ Large language support: 30+ programming languages. ✅ Detailed action plans: Prioritize remediation with tailored action plans. ✅ Code Security: Seamless Static Application Security Testing (SAST) integration. ✅ Insights: On-demand or continuous scanning Software Composition Analysis (SCA) to help reduce third-party threats. ✅ One-click Software Bill of Materials (SBOM) generation Code Smarter. Secure Faster. Ship Sooner.

CppDepend is a comprehensive code analysis tool for C and C++ languages, tailored to assist developers in maintaining complex code bases. It offers a broad spectrum of features for ensuring code quality, including static code analysis, which is pivotal in identifying potential code issues such as memory leaks, inefficient algorithms, and deviations from coding standards. A key aspect of CppDepend is its support for widely recognized coding standards like Misra, CWE, CERT, and Autosar. These standards are crucial in various industries, particularly in developing reliable and safe software for automotive, embedded, and high-reliability systems. By aligning with these standards, CppDepend helps in ensuring that the code complies with industry-specific safety and reliability requirements. The tool's integration with popular development environments and its compatibility with continuous integration workflows make it an invaluable asset in agile development.

Ship high quality code. Review code, discuss changes, share knowledge, and identify defects across SVN, Git, Mercurial, CVS, and Perforce. Create formal, workflow-based, or quick code reviews and assign reviewers from across your team. Turn any code review into a threaded discussion and comment on specific source lines, files, or an entire changeset. Take action on what's important with unified views into your code activity for commits, reviews, and comments. Improve code quality with data on which parts of your codebase have not been sufficiently reviewed. Get a quick view of review status and who might be holding up reviews. Access a complete audit trail with all code review details, down to the history of a specific review. Customize your Jira Software workflow to stop if there are any open reviews. Upgrade your workflow with Jira Software, Bitbucket Server, Bamboo and hundreds of other developer tools.

This module provides code coverage metrics for Perl. Code coverage metrics describe how thoroughly tests exercise code. By using Devel::Cover you can discover areas of code not exercised by your tests and determine which tests to create to increase coverage. Code coverage can be considered an indirect measure of quality. Devel::Cover is now quite stable and provides many of the features to be expected in a useful coverage tool. Statement, branch, condition, subroutine, and pod coverage information is reported. Statement and subroutine coverage data should be accurate. Branch and condition coverage data should be mostly accurate too, although not always what one might initially expect. Pod coverage comes from Pod::Coverage. If Pod::Coverage::CountParents is available it will be used instead.

Tarpaulin is a code coverage reporting tool for the cargo build system, named for a waterproof cloth used to cover cargo on a ship. Currently, tarpaulin provides working line coverage and while fairly reliable may still contain minor inaccuracies in the results. A lot of work has been done to get it working on a wide range of projects, but often unique combinations of packages and build features can cause issues so please report anything you find that's wrong. Also, check out our roadmap for planned features. On Linux Tarpaulin's default tracing backend is still Ptrace and will only work on x86 and x64 processors. This can be changed to the llvm coverage instrumentation with engine llvm, for Mac and Windows this is the default collection method. It can also be run in Docker, which is useful for when you don't use Linux but want to run it locally.

Coverage provides coverage data collection, manipulation, and formatting for Dart. Collect_coverage collects coverage JSON from the Dart VM Service. format_coverage formats JSON coverage data into either LCOV or pretty-printed format.

Generate test coverage reports for Xcode projects & hook it into CI. Enable test coverage by ticking the "Gather coverage data" checkbox when editing a scheme.

NCover Desktop is a Windows application that helps you collect code coverage statistics for .NET applications and services. After coverage is collected, Desktop displays charts and coverage metrics in a browser-based GUI that allows you to drill all the way down to your individual lines of source code. Desktop also allows you the option to install a Visual Studio extension called Bolt. Bolt offers built-in code coverage that displays unit test results, timings, branch visualization and source code highlighting right in the Visual Studio IDE. NCover Desktop is a major leap forward in the ease and flexibility of code coverage tools. Code coverage, gathered while testing your .NET code, shows the NCover user what code was exercised during the test and gives a specific measurement of unit test coverage. By tracking these statistics over time, you gain a concrete measurement of code quality during the development cycle.

JaCoCo is a free code coverage library for Java, which has been created by the EclEmma team based on the lessons learned from using and integrating existing libraries for many years. The master branch of JaCoCo is automatically built and published. Due to the test-driven development approach, every build is considered fully functional. See the change history for the latest features and bug fixes. SonarQube code quality metrics of the current JaCoCo implementation are available on SonarCloud.io. Integrate JaCoCo technology with your tools. Use JaCoCo tools out of the box. Improve the implementation and add new features. There are several open-source coverage technologies for Java available. While implementing the Eclipse plug-in EclEmma the observation was that none of them are really designed for integration. Most of them are specifically fit to a particular tool (Ant tasks, command line, IDE plug-in) and do not offer a documented API that allows embedding in different contexts.

Dependabot is an automated dependency management tool that integrates seamlessly with GitHub repositories to keep project dependencies up-to-date and secure. By regularly scanning for outdated or vulnerable libraries, Dependabot proactively generates pull requests to update these dependencies, ensuring that projects remain secure and compatible with the latest releases. Its core logic is designed to handle various package managers and ecosystems, making it versatile for diverse development environments. Developers can customize Dependabot's behavior through configuration files, allowing for tailored update schedules and specific dependency rules. By automating the dependency update process, Dependabot reduces the manual effort required to maintain project dependencies, thereby enhancing overall code quality and security.

Sider Scan is a lightning-fast duplicate code detection tool for software developers that finds and continuously monitors problems with code duplication. GitLab CI/CD, GitHubActions, Jenkins & CircleCI® integration. Installation using a Docker image. Easy team sharing of the analysis details. Continuous and fast analysis that runs in the background. Dedicated product support via email and phone. Sider Scan enhances long-term code quality and maintenance processes with in-depth duplicate code analysis. It's designed to complement other analysis tools, helping teams to produce cleaner code, and supporting continuous delivery. Sider finds duplicate blocks of code in your project and groups them. For each pair of duplicates, a diff library is created and pattern analyses are initiated to determine if there are any problems. This is referred to as the 'pattern' method of analysis. Time-series analysis is only possible when the scan is consistently run at regular intervals.

The LDRA tool suite is LDRA’s flagship platform that delivers open and extensible solutions for building quality into software from requirements through to deployment. The tool suite provides a continuum of capabilities including requirements traceability, test management, coding standards compliance, code quality review, code coverage analysis, data-flow and control-flow analysis, unit/integration/target testing, and certification and regulatory support. The core components of the tool suite are available in several configurations that align with common software development needs. A comprehensive set of add-on capabilities are available to tailor the solution for any project. LDRA Testbed together with TBvision provide the foundational static and dynamic analysis engine, and a visualization engine to easily understand and navigate standards compliance, quality metrics, and code coverage analyses.

Testwell CTC++ is a powerful instrumentation-based code coverage and dynamic analysis tool for C and C++ code. With certain add-on components CTC++ can be used also on C#, Java and Objective-C code. Further, again with certain add-on components, CTC++ can be used to analyse code basically at any embedded target machines, also in very small ones (limited memory, no operating system). CTC++ provides Line Coverage, Statement Coverage, Function Coverage, Decision Coverage, Multicondition Coverage, Modified Condition/Decision Coverage (MC/DC), Condition Coverage. As a dynamic analysis tool, CTC++ shows the execution counters (how many times executed) in the code, i.e. more than a plain executed/not executed information. You can also use CTC++ to measure function execution costs (normally time) and to enable function entry/exit tracing at test time. CTC++ is easy to use.

Gcov is an open-source code-coverage tool.

BullseyeCoverage is an advanced C++ code coverage tool used to improve the quality of software in vital systems such as enterprise applications, industrial control, medical, automotive, communications, aerospace and defense. The function coverage metric gives you a quick overview of testing completeness and indicates areas with no coverage at all. Use this metric to broadly raise coverage across all areas of your project. Condition/decision coverage provides detail at the control structure level. Use this metric to attain high coverage in specific areas, for example during unit testing. C/D coverage provides better detail than statement coverage or branch coverage, and provides much better productivity than more complex coverage metrics.

mirrord is an open-source tool that lets developers run local processes in the context of their cloud environment. It makes it incredibly easy to test your code on a cloud environment (e.g. staging) without actually going through the hassle of Dockerization, CI, or deployment, and without disrupting the environment by deploying untested code. Instead of saving it for the last step, now you can shift-left on cloud testing you can test your code in the cloud from the very beginning of your development process.

PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth.

Bugbot is an AI-powered code review agent that automatically reviews pull requests to identify bugs, security issues, and code quality problems. Built into the Cursor ecosystem, Bugbot analyzes PR diffs and leaves contextual comments with clear explanations and fix suggestions. It runs automatically on every pull request update or can be triggered manually using comments. Bugbot reads existing PR discussions to avoid duplicate feedback and build on prior context. The tool supports customizable rules through configuration files and team-wide policies to enforce coding standards. Bugbot integrates seamlessly with GitHub, GitLab, and enterprise repositories. It helps development teams catch issues early and improve code quality without slowing down workflows.

Architecture analysis software that checks code compliance with the intended software architecture. It imports UML architecture models and enables architecture checks to reveal architecture erosion and technical debt. The platform includes an integrated modeling tool and architecture views for safety and security. Axivion Architecture Verification also ensures the code matches the architecture, recovers undocumented architectures, and strengthens safety architectures.

Many Python frameworks can handle basic dashboards but falter with complex ones, often leading teams to split into frontend and backend roles, causing various challenges. Solara is a new web framework that integrates ReactJS principles with Python simplicity. It offers a flexible API for various UI complexities and efficient state management. Solara supports a range of applications, from prototypes to intricate dashboards, and is compatible with platforms like Jupyter, Voilà, and various web servers. It emphasizes code quality, developer accessibility, and robust testing.

ORMIT™-APEX is the only migration solution that allows effortless migrations from Oracle APEX to Java. ORMIT's delivers an automated migration or upgrade that can cost up to 90% less time than a manual migration. ORMIT™ APEX improves code quality and maintainability, thus paves the way for even more savings over time. 100% Open source: no licensing, support fees, or vendor lock-ins will ever apply to your migrated applications.