Side by side
Coverity Scan vs GitHub CodeQL
Both stand on static analysis tools. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Free plan APIWeb
Choose Coverity Scan if your registered open source project needs cloud static analysis and its build allowances suit your needs. Look elsewhere if your project is not eligible or needs support for older tool releases.
Visit Coverity Scan
Free plan ExtensionLinuxMac+3
Visit GitHub CodeQL The facts
| Coverity Scan | GitHub CodeQL | |
|---|---|---|
| Free plan | Yes | Yes |
| Open source | Not published | Not published |
| Runs on | API, Web | Extension, Linux, Mac, Self-hosted, Web, Windows |
| Lowest paid plan | Free or on request | See the plans |
| Plans published | 1 | 4 |
| Maker | Not published | Not published |
| Website | scan.coverity.com | codeql.github.com |
| On static analysis tools | #12 of 38 | #8 of 38 |
Coverity Scan: what it does well
- Free plan for eligible registered open source projects
- Supports the listed programming languages
- Explains the root cause of each defect
- Can import GitHub projects for analysis
- Supports build automation with Travis CI
What to know first
- Use is limited to registered open source projects
- Weekly and daily build limits vary by project size
- Only the latest two tool releases are supported
GitHub CodeQL: what it does well
Alternatives to Coverity Scan Alternatives to GitHub CodeQL The whole list