Codacy @codacy

Starting June 1, GitHub Copilot code review is no longer included in your subscription. It now draws from the same token pool as chat, agents, and CLI and separately consumes GitHub Actions minutes on private repos. Two line items where there used to be none. Our CTO Kendrick wrote up a piece what you need to know: eu1.hubs.ly/H0vH9NN0

Luis Ventura is now discussing AI, production failures and engineering workflows at #JNation. #AI #DevOps #Coimbra

keyboard_arrow_left Previous keyboard_arrow_right Next

Codacy now integrates AgentLinter, a tool with 100+ rules that checks your agent config files for security issues, unclear instructions, and missing guardrails. Credit to @simonkim_nft and @subinium for building the tool. Read the full update and capabilities. blog.codacy.com/introducing-ag…

Generation → verification → correction. The loop AI-heavy codebases need: When an agent ships a change, an independent verification layer runs deterministic checks and returns pass/fail with reasons, and on failure the agent retries against structured feedback instead of guessing. Skip that middle step and errors compound silently across commits. Read article: blog.codacy.com/why-coding-age…

For the engineering teams quietly wondering what AI models and tools have piled up in their codebase: AI Inventory maps every model, SDK, API key, and MCP server used on the codebase, down to the file and line. Start free codacy.com/ai-inventory

"Engineering leaders know their teams are using AI tools, they just can't tell you exactly which ones, where, or how they're configured. We want every engineering organization to have that answer before anyone comes asking for it." @jaimefjorge prn.to/4tz3B9g

AI Inventory is live. It scans your connected repos and shows you every AI model, library, API key and endpoint used across your codebase. No new setup, no agents, no surveys. Now available for all paid users and new trials. → Read the full update blog.codacy.com/which-ai-tools…

Now that we've 100%ed code analysis, we are proud to embark on a new journey. Today, we’re applying our linting and scanning expertise to the tangible world. Introducing Codacy Lint ‘n’ Scan Hardware: A curated line of premium linters, scanners, and detection tools designed to solve real-world problems with the same precision we brought to your codebase. Check out our new collection: shop.codacy.com

SaaS is dead. We replaced $750/month in SaaS with $4,570 in LLM tokens. Now the team spends half their time debugging vibe-coded chaos instead of shipping. But hey… we “own the stack.”

@rakesh_nakrani @GitHubCopilot @DeepCodeAI @swimm_io @askcodi 🫶

Our AI Reviewer for Pull Requests just got a significant upgrade. → Custom instructions to tune its output to your team’s preferences → Ready-to-use prompts for generating missing unit tests → ‘Run Reviewer’ button on your PR to re-trigger reviews as you commit changes Read the full update📷 blog.codacy.com/whats-new-in-c…

Kiran Kumar Badam runs engineering and security for @getvymo , a fintech platform serving 70+ global financial institutions with 150 developers and 500+ repositories. Before Codacy, security checks happened twice a year. Audit prep alone took 4 weeks. Remediation took 2–3 months. Now security is embedded across every stage of the SDLC: IDE, pull request, and release. Codacy was chosen over SonarQube, Semgrep, GitHub Advanced Security, and AquaSec. The deciding factors? The best native Bitbucket support, combined code quality and security in one platform, and a team that was genuinely engaged throughout the evaluation. Read full customer story blog.codacy.com/how-vymo-embed…

"You should not let any commits go unreviewed. Naughty, naughty, naughty." Dana Lawson, CTO of @Netlify , on the latest AI Giants. Need guiding principles for coding with AI? Dana has plenty. Here’s a summary: - Keep PRs small. If a human can't read it in one sitting, it's too big. - Don't let Claude check Claude. Use a different model, a different agent, or a human. Same model, same blind spots. - Don't LGTM a 1,000-line AI PR in 10 minutes. We all know you didn't read it. - You need two reviews if you're SOC2 compliant. - Treat AI commits like any other commit. The bar doesn't move because a machine wrote it. - Don't skip tests because shipping felt good. Vibe coding is fun; flaky prod is not. - Best practices didn't expire when agents arrived. 🧾 Listen to them in context; full episode: youtube.com/watch?v=-q3k3E…

English is the S-tier programming language now. Dana Lawson (Netlify CTO) on Agent Experience replacing Developer Experience, the death of “LGTM,” and why flaky tests are still ruining everyone’s day. Thanks @jaimefjorge and @Codacy for the convo: youtube.com/watch?v=-q3k3E…

@Netlify @jaimefjorge 🫶

SonarCloud charged by lines of code, and was a nightmare to roll out at scale. So LSports switched to Codacy. Two years later: test coverage up from 7% to 70%, and zero new critical security issues. Worth a read if you want to move away from SonarQube👇 blog.codacy.com/how-lsports-we…

It's "almost foolish" to run AI through your SDLC unchecked. Netlify CTO Dana Lawson thinks we should keep humans in the loop on security reviews, privacy, data and governance. The risk of getting it wrong in there is too high to leave to 𝚌̶𝚑̶𝚊̶𝚗̶𝚌̶𝚎̶ probability.

⚙️ VS Code started as a 10-person team building an editor. Ten years later, it’s used by millions of developers, supports 90K+ extensions, and has become a foundation many AI tools build on. In this behind-the-scenes conversation with @codacy, we talk about the early pivots between web and desktop, the bet on open source, why performance and core editing still matter as much as AI, and how agents are starting to shape what comes next. 📖 Read the full interview: blog.codacy.com/how-vs-code-qu…

@code We loved having you on, @IsidorN & @code 🫶 Oct 2025 feels like 5y ago these days, we should do another one soon