Reviews
Every pull request read against the whole system, not just the diff: a plain-language summary, a merge readiness score, and findings ranked by what will actually break.
As soon as a pull request opens, Codity posts a plain-language summary of what changed and why it matters, plus a merge readiness score across review, security and code quality.
If the PR links a ticket (Jira, Linear, ClickUp, Azure Boards, GitHub Issues or GitLab Issues, with specs from Confluence or Notion), the implementation is checked against its requirements and a live checklist is posted: "2 of 4 implemented".
Every scan posts a code quality report with an overall score, severity counts and a per-file breakdown, so review effort goes where the risk is.
Findings ship as inline review comments with the corrected code included. Apply the suggestion from the PR without leaving GitHub.
Reply
@codity fixand Codity commits fixes for the open findings to the PR branch, most severe first, and says which ones it skipped and why.@codity fix stacked propens them as a separate pull request instead.Each push is compared with the previous review: findings are marked Fixed, Open or New, and a push that only addresses flagged code skips the full re-scan. Reviews can run when a PR opens or on every commit.
Codity indexes every connected repository, so a review is grounded in the full architecture, not just the diff. When one change spans several repositories, it finds the sibling PRs through shared ticket keys or links and flags interfaces that no longer agree.
More Features
- Security ScansSecrets, injection, auth gaps, dependency risk and an org-wide SBOM, caught before the merge.
- GovernanceMerge gates, policy checks and review rules, enforced on every pull request.
- Code NavigationA live architecture map, component health from Repo X-Ray, and answers across every repository.
- Developer AnalyticsReview latency, rework, throughput and DORA metrics per team and repository.
- Monitoring & InsightsContinuous repository monitoring with anomaly detection and deployment insight.
- Repo ScanA one-off, whole-repository review by eight specialist reviewers.
- PentestingBlack-box and active DAST testing of your live application, with evidence-checked findings.
- Model EvaluationEvaluate your LLM feature with tests written from what it is meant to do.
PR Summary
useScreenOnlycomposable to control element visibility from theme config.