All blogs / Software / engineering practice
Codacy
News and thoughts on code quality, code reviews, code analytics and static analysis.
- Posts
- 491 from 20 Nov 2013 to 30 Oct 2026
- Posting
- weekly (29 in the last year)
- Kind
- company blog
- Feed
- https://blog.codacy.com/rss.xml
2026 25
- AI-native SDLC: how to get there without rebuilding your development process in 2026
- What Is AI Context Engineering? Giving Coding Agents the Right Context
- AI Giants Recap: People Are Sleeping on Swarms (with Steve Yegge)
- Graph, Harnesses and Loop Engineering Explained
- How BFI Finance Optimized Engineering Efficiency and Consolidated Code Quality on One Platform
- How to Govern AI Coding Agents Across Development Teams
- Top Agentic Code Review Tools for Loop Engineering in 2026
- How AI Is Changing the Engineering Manager Role: More Context, More Capacity, and the New Job of Protecting Focus
- Does Your Engineering Team Have a Parallelization Strategy for AI Coding Agents 2026?
- AI Agent Harness: Why Code Quality Validation Belongs in the Loop (2026)
- AI Code Review Tools Compared (2026): Why Most Can't Safely Block a Merge, and What Code Governance Fixes
- How to Build a Remediation Agent That Closes Its Own Issues with Codacy (2026)
- Introducing Codacy Skills (Part 4): Scan and fix your code before you push
- Introducing Codacy Skills (Part 3): Let your agent set up test coverage
- Pre-Commit vs CI Quality Gates: When Fast-Shipping Moves The Checks Upstream
- Why this Fintech Chose Codacy Over SonarQube, Semgrep, and GitHub Advanced Security
- Deterministic Static Analysis for AI Coding Workflows: How to Cut Token Cost Without Weakening Code Review
- Why Engineering Teams Keep Building In-House AI Code Review Tools, and What It Really Costs
- Introducing Codacy Skills (Part 2): Configure your scan rules to cut PR noise
- AI Agents Are Turning Developers Into Engineering Orchestrators and Moving the Risk to Review
- AI Is Breaking Code Review: How Engineering Teams Fix the PR Bottleneck
- Introducing Codacy Skills (Part 1): Unblock Pull Requests with one prompt
- The Complete Guide to Technical Debt Tracking for Engineering Leaders
- Introducing AgentLinter: Codacy now scans your AI agent config files
- AI Giants Recap: English is the New S-Tier Language and Agent Experience the New DX
2025 22
- The Creator of OpenCode Thinks You're Fooling Yourself About AI Productivity
- Codacy Now Detects Malicious Packages like Shai-Hulud 2.0
- Codacy's New AI Risk Hub and AI Reviewer Bring Order to the Wild West of AI Code Compliance
- You're Paying Your Best Engineers $109,000 a Year to Babysit Code
- Cut Through the Noise: Introducing Smart False Positive Triage
- It’s official: Codacy is now SOC2 Type II compliant!
- AI Giants: Inside Lovable's $100M ARR Journey
- Why (and how) we migrated from Create React App to Vite
- Codacy Just Teased its New GPL License Scanner for AI Code
- Equipping Claude Code with Deterministic Security Guardrails in 5 Minutes
- Why Shift Left is Failing: Key Takeaways from Codacy’s Latest Showcase
- Codacy DAST: Scan Your Running Applications for Security Vulnerabilities
- Introducing Codacy Guardrails
- CTO Craft Con in London: Takeaways
- Understanding Cross-Site Scripting Attacks and How to Prevent Them
- What is Code Coverage? - Codacy | Blog
- What is Code Coverage? - Codacy | Blog
- Static Code Analysis: Everything You Need To Know
- A Guide to DevSecOps Tools
- OWASP Explained: Secure Coding Best Practices
- Opengrep vs. Semgrep: Some Thoughts
- G2 Names Codacy Industry Leader in Winter 2025 Report
2024 37
- Celebrating a Year of Innovation: Codacy's 2024 Recap
- What is a Software Bill of Materials (SBOM)?
- A Guide to Manual Penetration Testing
- DAST Consolidation in Application Security
- Top 5 Checkmarx Alternatives in 2026
- Assigning Multiple Coding Standards to a Single Repository
- Top 5 SonarQube Cloud (SonarCloud) Alternatives in 2026
- Segments for GitHub Custom Properties
- New Coverage Page
- Understanding Injection Attacks and How to Avoid Them
- Proactive Software Composition Analysis (SCA) Scan
- Thousands of New SAST Rules Added With Semgrep Integration
- The Role of SAST and DAST Tools in API Security
- The Role of SAST and DAST Tools in Threat Modeling
- Key Management: A Complete Guide
- Top 5 Snyk Alternatives in 2026
- Penetration Testing for Compliance: A Complete Guide
- Secure Software Development Lifecycle (SSDLC): A Complete Guide
- SAST, DAST, IAST, and RASP: Key Differences and How to Choose
- How to Ensure Security Compliance in Modern Software Development
- Codacy Named Industry Leader in G2 Spring 2024 Report
- Code Coverage vs. Test Coverage: What’s the Difference?
- The Intersection of Compliance and Security in Software Development
- Cloud Security Posture Management (CSPM): A Complete Guide
- Exploring Software Development Challenges and Trends: The State of Software Quality 2024 Report
- The EU Cyber Resilience Act: A Complete Guide
- The 8 Best SonarQube Alternatives in 2026
- Backstage Plugin
- Codacy Product Showcase April 2024
- Navigating Application Security Testing (AST): Methods and Best Practices
- Avoiding Technical Debt: How to Measure, Manage, and Tackle Technical Debt
- Best Practices for Identifying and Eliminating Code Smells
- AppSec in the Age of Continuous Integration and Deployment
- What is Static Application Security Testing (SAST)?
- Penetration Testing: A Complete Guide
- Every Code Review Is a Security Review
- 7 Best Practices for Security Code Reviews
2023 17
- 8 Code Quality Metrics Every Engineering Team Should Track
- Best Practices for Coding with AI in 2024
- Code Quality Explained
- What Is DevSecOps? Shift Security Left in Your DevOps Lifecycle
- How Our CSMs Use Data to Improve Customer ROI
- What Are Linters? (+ Why Your Team Should Use Them)
- Codacy Product Showcase October 2023 - Codacy | Blog Company
- Codacy's New Coverage Pipeline Feature Diff Coverage | Blog
- 21 AI Tools for Developers in 2026
- AI-Assisted Coding: 7 Pros and Cons to Consider
- May 2023 Product Update 🚀
- How does code quality fit into your CI/CD pipeline?
- How Stim uses Codacy to achieve high-quality code
- 6 things developers should do to ship more secure code
- Automated Software Correction
- Limitations of linters and how automated code review tools can help
- Now live: introducing Coverage summary on your Git provider!
2022 14
- 3 Python style guides that will improve your coding standards
- Great news: Unity support is now live!
- October Product Update 🚀
- Announcing our Series B
- 9 challenges of managing PRs and how to solve them
- Why automated code reviews should be part of your workflow
- Best practices to manage an open source project
- How to use an external NFS Server with Codacy
- June Product Update 🚀
- Introducing Codacy Labs: our experimental playground
- How Bliss Applications uses Codacy to achieve engineering excellence
- Flexible vacation days: our commitment to employees’ well-being
- How to determine your goals and metrics to adopt a data-informed culture
- How Vevo uses Codacy to replace legacy systems
2021 6
- Web Summit 2021: Lessons of changing culture for product-led growth
- How LOGEX uses Codacy for ISO/IEC 27001:2013 compliance
- We Did a Hackathon! - Codacy | Blog
- Using the API to add Codacy Grade details to the Readme - Codacy | Blog
- March Product Update: Support for Cloud Infrastructure-as-code, Custom Reports with API endpoints & more 🚀 - Codacy | Blog Products
- Read Top 5 Ways To Slim Docker Images | Codacy Blog
2020 8
- 8 Common Software Development Mistakes and How to Avoid Them - Codacy | Blog
- Enhanced security for C++, Java, and Scala with Clang-Tidy and SpotBugs - Codacy | Blog
- GitHub Apps Migration For Improved Access Control Vs OAuth Integration
- DevSecOps: How Microservices & Container Technology Led To Its Rise
- Lazy Loading Images Tips & Tricks | Improve User Experience
- CI/CD Pipeline: Auto Ensure Code Quality | Walk Through Example
- Software Quality: Read 4 Trends That Will Boost It In 2020
- GitHub Sync: Introducing Seamless User Management | Enterprise
2019 5
2018 4
2017 3
2016 5
- Lambda World With Codacy & 47 Degrees - Codacy | Blog
- How to make the Scala compiler review your code - Codacy | Blog
- GitLab Enterprise Integration: Self-Hosted Solution Integrates With GitLab
- Scala Conference | LX Scala | Lisbon Tech Event | With 47 Degrees
- Scala Security: 8 Top Issues You Should Know For Prevention
2015 11
- ScalaX: 9 Great Talks At Scala Exchange - Codacy | Blog
- Open Source Development: a few guidelines - Codacy | Blog
- Microsoft WebCamp - Codacy | Blog
- Scala Static Analysis Tool Review
- Code Reviews Best Practices: Ensure Higher Quality Code
- Docker Tutorial: Dockerizing Scala - Codacy | Blog
- Development Workflow | 6 Ways To Integrate Code Review
- Atlassian Connect for Bitbucket: New Codacy Integration | New Feature
- Scala.meta: A Quick Look | Scala Programming Tip
- Code Review Comments | Survey | 20% About Style & Best Practices
- Moving to Micro-services — Service Discovery - Codacy | Blog
2014 4
2013 2
Undated 328
- Common vulnerabilities and exposures cve
- Small pull requests
- What is an agbom
- Devops market software dev tools
- What we learned after migrating 300 customers from sonarqube to codacy
- Fear is the open source killer
- 7 tools code review engineers github
- The inverse of technical debt is code quality
- Code review is dead why ai generated code needs verification not human approval
- Lizard codacys new code complexity analysis tool
- Optimizing code in scala
- Codacy usage dashboard confirm every repository is running to standard
- Somos interview case study
- Code review checklist
- Secure coding standards in agile development
- Error handling monad error for the rest of us
- Into the breach business survival in the age of accelerating cyber threats
- Vulnerability prioritization
- Introducing hipchat slack and webhooks notifications
- Should open source developers get paid
- Why were safer
- September 2022 product update
- Software dependency management
- What everyone gets wrong about the ralph loop
- Technical debt
- Codacy product showcase october 2024
- Shift left testing
- Fun open source tools to check out in 2025
- The official scala style guide on your open source projects
- Velocity cycle time
- Introducing php and easier file ignore
- What is appsec
- Codacy vscode extension
- 10 facts about code reviews and quality
- Software development trends 2022
- New feature code standard customization
- 9 scala security issues
- Sast vs dast
- Research on code coverage
- How to contribute to an open source project
- Codacy integrates with checkstyle
- How to guard your codebase against security threats
- Codacy partners with 47 degrees
- Why do you need to measure code coverage
- Which ai tools are your devs using solving the shadow ai problem with ai inventory
- Public product roadmap
- Organization manager role
- Introducing python support
- Codacy product showcase january 2025
- Ai code review cost per pull request what engineering teams actually pay in 2026
- Agentic sdlc loop engineering how black box runs pr review gates at scale
- Software composition analysis sca
- How to keep your ai generated code secure
- July 2022 product update
- How to update large tables in postgresql
- Codacy quality ai actionable fixes
- April product update
- Infrastructure as code iac
- Codacy security now includes dynamic application security testing dast
- Application security
- Insecure design owasp top 10
- Increasing quality from people to organizations
- How lsports went from 7 to 70 unit test coverage
- Best coderabbit alternatives 2026
- How to connect cursor to github and codacy mcp servers and supercharge your application security
- Open source software security
- Container security
- 6 products every scala developer should use
- Defusing the ai coding time bomb key takeaways from codacys latest showcase
- Dast tools
- Ai coding assistant dependency version selection risks stale bleeding edge or non existent
- Migrating to react typed named routes react router typescript
- Agentic development is standardizing faster than its operating model
- Owasp dependency check
- Reducing cycle time
- Green flag codacy pci dss compliance
- December 2022 product update
- Code security with codacy
- What is clean code
- How to implement coding standards in your organization
- Transitive dependencies in supply chain security
- Centralized view of security issues
- Javascript vulnerabilities
- Why coding standards matter
- Onboard your organization to codacy
- Eslint compromised
- Dns hell in kubernetes
- Hard coded secrets
- The merging schedule of open source projects
- Best practices for regular expressions
- The new codacy workflow
- Quality oriented culture
- Code coverage types
- How the 170 million ethereum bug could have been prevented
- Ruff a powerful new python linter in codacy
- Visualizing pull request lifespan vs programming languages
- Code patterns parameters demand analysis
- Why we chose scala
- Codacy integrates with eslint
- May 2022 product update
- Displaying pen testing results in the security and risk management dashboard
- Ruby security issues you should avoid
- 3 popular csharp style guides
- Refactoring legacy code
- How vs code quietly became the operating system for ai development inside microsofts 10 year startup story
- How to perform continuous non blocking code reviews
- Diff coverage
- February 2022 product update
- Grading european banking ssl security
- Share dashboards announcement
- Whats new in codacys ai reviewer
- March 2013 product update
- Code documentation
- One less exception
- Java static code analysis tools
- Common programming errors
- Codacy product showcase january 2024
- Web application security
- Introducing quality thresholds with our new code quality settings
- Create jira tickets for issues in codacy
- G2 codacy summer 2023
- Mobile premier league codacy development efficiency
- Codacy named a leader in g2s spring 2025 report
- Codacy intellij idea extension now available
- Automation bias in ai generated code review why clean code still ships broken
- Server side request forgery ssrf owasp top 10
- Why your company needs ai governance now
- Code complexity
- Risks of outsourced development
- January 2022 product update
- First qa engineer in a startup
- Comparing best practices across programming languages comments
- Implement google javascript style guide with codacy
- Veracode alternatives
- Review of ruby static analysis tools
- Your greatest code quality threats and how to solve them
- Switching to kubernetes
- Pull request coverage diff view
- Cyber resilience act and open source
- Iso iec 27001 2013
- Is coding with ai secure
- 7 best practices for writing great software tests
- How to write clean code
- Scala meetup tricity users group
- Why owasp matters in modern web development
- Codacy quality ship higher quality code
- Scaling code security single enforcement layer
- April 2022 product update
- Codacy is soc2 type i certified
- Loosely coupled architecture
- New coverage status checks added
- April 2023 product update
- Codacy 2020 highlights wrapped
- Open source license scanning
- Why coding agents need independent quality gates
- February 2013 product update
- Code reviews best practices
- Cross language best practices
- December product update
- Security alerts on your project
- Detecting malicious intent across ai generated pull requests a governance framework for engineering leaders
- Gitlab com integration improves code quality
- Why github marketplace is the perfect fuel for growth
- 7 drawbacks of linting tools
- Discover and predict your code quality trends
- Happy 8th birthday codacy
- Cpp open source projects
- How to measure change failure rate
- How to get security approval for ai coding tools a technical governance blueprint 2026
- Codacy pioneers a random whatsapp scroll turned life changing
- Code smells and anti patterns
- Codacy named leader in g2 fall 2023 report
- November 2022 product update
- How to improve code coverage
- Devops jenkins world
- Adding collaboration
- Why automating code reviews for enterprise is vital
- Iso 25010 software quality model
- Net neutrality laws us can learn from europe
- Filtering security issues by category in codacy security
- How to learn scala
- 2020 with codacy
- How to measure time to recover
- G2 names codacy industry leader in fall 2024 report
- Lizard complexity metrics now power file level analysis and gates
- Visualizing scala code style
- Improve the efficiency of your remote engineering team
- Application security metrics
- Measuring and improving software development productivity
- Deploy better code with codacy and deveo
- Vulnerability in rules files with hidden unicode characters
- July product update
- Product ama 2020
- November product update
- August product update
- September product update
- March 2022 product update
- Organization coding standards
- Database migration to amazon aurora
- Repository instructions are becoming engineering artifacts
- Codacy dependency vulnerability scanning now supports java
- Clean code principles
- How to write legible qa tests
- Sbt the easy way
- How code quality affects application security
- We analyzed ai generated code
- Introducing codacy coverage
- Insidetracker customer story
- We scanned 34266 repos. 1 in 4 orgs showed gaps in ai agent config files
- The state of testing in php in 2018
- Github enterprise cloud integration with codacy
- Ai code review is not enough how engineering leaders should gate ai generated code
- What is dast
- Firstbird use case
- Devops vs devsecops
- 11 podcasts for developers
- May product update
- Difference between private and privatethis
- True impact technical debt
- June product update bulk copy of patterns between repositories new tools and more
- Pull request best practices
- January 2023 product update
- October product update
- Evolving devsecops to protect against new threats associated with ai and ml
- Codacy pioneers open source fellowship
- Review of php static analysis tools
- Software engineering research trends 1964 to today
- New security and risk management features
- Cx software company closed 1200 security issues with 90 accuracy using codacy
- The economics of code quality
- A guide to code coverage part 2 using it with codacy
- How to measure deployment frequency
- Codacy at pycon 2019
- Enhanced sca granularity full visibility into all dependency vulnerabilities
- The engineering managers eu ai act compliance checklist 2026
- Client side tools integration
- Html canvas cheat sheet
- Weve raised a series a heres what is important to know
- 7 ways enforcing coding standards will help you develop faster
- 4 popular javascript style guides
- Champagne mindset
- Preparing for the european accessibility act 2025
- Product update february 2021
- Introducing automatic comments on your pull requests
- Github copilot code review used to be included from june 1st you pay twice
- Sast tools
- The visibility problem behind ai tool adoption in engineering teams
- 3 new code patterns for scala
- Space framework
- Dora metrics to accelerate software delivery
- Ai giants how augment code solved the large codebase problem
- Secrets management
- Cryptographic failures owasp top 10
- Add a custom host to kubernetes
- Shortcuts to learning kotlin
- Iso 42001 what engineering leaders need to know about the ai management system standard
- Codacy integrates ossf scorecard for true supply chain confidence
- How codacy dogfoods verity with its own ai agents
- Organization metrics dashboard for monitoring code quality
- Introducing new organizations
- Introducing codacys dependency explorer
- Java vulnerabilities
- How to tackle technical debt
- What to expect after adopting a code review tool like codacy
- Funding announcement company vision
- Monkey exchange use case
- Cyclomatic complexity
- Automated code review tool codacy
- The real competitor to vercels v0 is microsoft word
- What is code coverage
- Knowledge bases will define the next generation of agentic coding
- Read and understand codacy reports
- Continuous code quality
- Short guide to javascript gotchas
- G2 codacy summer 2022
- Why youre not merging your pull requests and what to do about it
- Teams built quality and security infrastructure around the repository and that is now breaking
- Software supply chain security
- Benchmark the risk profile of your ai coding posture
- Top mistakes code reviews
- Top 10 ways to be a faster code reviewer
- Deeper github integration issues and comments
- Spring tech events codacy
- Typed actors with routing
- Technical due diligence for startups
- 7 software development shortcuts that will backfire
- August 2022 product update
- Python static analysis tools
- Introducing codacy securitys appsec dashboard
- Scala faster and slimmer with graalvm
- How to measure lead time for changes
- The new codacy
- Codacy guardrails free real time enforcement of security and quality standards
- From sonar to codacy how ihomer equipped their devs for the future with ai guardrails
- Introducing container image scanning secure your images against new cves
- Changes reviews work in progress metrics
- What auditors will ask about ai generated code in 2026
- Why we implemented offline days at codacy
- Docker basics
- Ship safer code plug codacy guardrails into gemini cli in 90 seconds
- How to test github actions
- Best practices for writing clean code
- What is shift left security
- Codacy guardrails is now available for intellij jetbrains ides
- Pair programming at codacy and why we do it
- Ai code review governance
- Codacy product showcase july 2024
- Insecure dependencies detection
- Fixing a too many open files exception
- Open salary calculator
- 7 best practices work with freelancers outsourced developers
- The ai coding maturity scale the path to loop engineering
- What would happened if you merged all your open pull requests
- Code review vs testing
- Codacy loves open source
- Functional non functional testing
- Introducing configurations and new filters
- Designing better types
- My first 45 days at codacy
- Webinar recap ai assisted development
- Understanding microservices with tracing
- Removing our goals feature
- Using ai to normalize and improve scan rule documentation at codacy
- Deciphering javascript checkers
- Static code analysis tools
- Coding standards
- Application security posture management aspm
- Further enterprise security analysis for scala