Qodana

Learn how to extend Qodana with a custom JetBrains plugin that adds a Kotlin code inspection to enforce project naming conventions across CI, Docker, and the IDE.

When people think about tooling for Android development, the conversation often gravitates towards platform-specific concerns: UI performance, layout validation, device compatibility, or resource management. Yet for many Android teams, the most persistent challenges don’t sit at the platform level –…

Qodana 2025.3 delivers important new capabilities that help teams standardize their development practices, improve compliance, make audits easier, and simplify large-scale code analysis.  From introducing Global Project Configuration, a major step toward scalable, centralized policy manageme…

As engineering teams scale, so do the demands on their tooling. Code quality checks that worked well for one repository or service often need a more resilient, automated, and infrastructure-native setup when development ecosystems grow. That’s exactly why we’re excited to introduce first-class K…

As 2025 starts racing to a close, the JetBrains Qodana team is ending the year with a series of events dedicated to what matters most in modern software development: secure workflows, high-quality code, and practical tooling that empowers developers to ship with confidence.Whether you're working in …

The phrase “bad code” gets thrown around in reviews and online forums all the time. But what does it actually mean? It’s a good example of the vague terms that occasionally make the rounds in developer circles without much to qualify them.  We’ve collected opinions on the subject, metrics, a…

On November 19, 2025, join JetBrains Qodana for a live session exploring how enterprises can embed quality, security, and compliance directly into their development workflows. Hosted by Product Specialist, Kai Schmithuesen, this session will walk you through the latest Qodana capabilities and rea…

The Qodana Public API is now live, complete with full documentation, examples, and OpenAPI specifications. This release gives all Qodana Cloud users the ability to integrate Qodana directly into their own systems, automate key workflows, and access core functionality programmatically. View Docume…

This is the English version of the Japanese article first published by Jan Maki on Qiita. This post was not commissioned by Qodana and was written independently. For more information please reach out to them in the comments or via their link tree. Qodana is JetBrains’ code analysis platform f…

Why shadow AI can be dangerous1. Data leakage2. Security vulnerabilities3. Compliance violations4. Lack of auditabilityReal-world example: Samsung’s Source Code Leak via ChatGPTHow Qodana reduces shadow AI risksCompliance assuranceSecurity-focused scanningPolicy enforcement across teamsTraceability …

Best software composition analysis tools Qodana and Mend.io: SCA inside your JetBrains workflow1. Mend.io on its own2. Snyk3. OWASP Dependency‑Check4. Black Duck by Synopsys5. FOSSAHow SCA and static code analysis work togetherQodana is more of a SAST tool but does have some SCA capabilities A…

Discover the differences when it comes to software Composition Analysis vs. Static Code Analysis with Qodana.