Best 19 Continuous Integration static analysis tools

Automated code review tool integrates with GitHub, Bitbucket and GitLab (even self-hosted). Available for JavaScript, TypeScript, Python, Ruby, Go, PHP, Java, Docker, and more. (open-source free)

Automated SAST code reviews driven by security, supports 15+ languages and includes security training.

An automated code reviewing engine for PHP.

Deep code analysis for GitHub and Bitbucket to find security vulnerabilities and critical code quality issues (using Semmle QL). Automatic code review for pull requests; free for public repositories.

Automated PHP code review.

Quick automated code review of your changes. Supports more than 40 runners for various languages, including Clang, Elixir, JavaScript, PHP, Ruby and more.

Code review as a service with built-in static analysis.

Runs quality checks on your code using community tools, and makes sure your numbers don't get any worse over time.

Automated code review & repair.

A tool for posting review comments from any linter in any code hosting service.

Find security vulnerabilities, variants, and critical code quality issues using queries over source code. Automatic PR code review; free for public GitHub/Bitbucket repo: [LGTM.com](https://LGTM.com).

An automated code reviewing tool. Improving developers' productivity.

Vulnerability scanner for dependencies of node.js apps (free for Open Source Projects).

Multilanguage cloud-based static code analysis. History, trends, security hot-spots, pull request analysis and more. Free for open source.

SonarQube is an open platform to manage code quality.

A commercial static analysis platform that allows for scanning of multiple languages (C/C++, Android, C#, Java, JS, PHP, Python, Node.JS, Ruby, Fortran, and Swift).

Static and dynamic analysis tool supporting more than 25 languages and direct IDE integration. Free hosting for Open Source projects available on request. Free academic licenses available.

Code review tool with static code analysis and code-aware navigation for Java, PHP, JavaScript and Kotlin.

Java library for parsing report files from static code analysis. Used by a bunch of Jenkins, Maven and Gradle plugins.