Qodana

Code coverage is one of those metrics that every development team talks about but few use to its full potential. Whether you’re shipping a SaaS product or maintaining a legacy monolith, understanding what your tests actually exercise-and what they miss-can make the difference between a confiden…

It’s a situation you’ve probably experienced before: late in your development process, a security vulnerability surfaces during final testing, weeks after the code was written. As a result, you find yourself context-switching from your current sprint, reconstructing decisions you made a month ago, a…

What’s at stake with every commitWhy compliance is an engineering workflow problemWhy manual reviews don't scale at audit timeWhat static code analysis actually doesThe case for catching problems earlierHow static analysis supports specific compliance workflowsPCI DSS coding requirementsSOC 2 change…

When news broke that SpaceX would acquire Cursor's parent company, Anysphere, in a reported $60 billion all-stock deal, most of the discussion centered around AI. This was another milestone and enormous valuation, and signal that AI is still bringing enormous disruption. Those reactions aren't wr…

PHP Version Migration Demo PHP powers 71.8% of all websites with a known server-side language. It is a living language that underpins a significant portion of the modern web and one that keeps getting better. For example, EKSNEKS notes that migrating from PHP 7 to PHP 8 alone can deliver 18–42% p…

Qodana For DevOps: Automated Code Quality and Security, at Scale Modern DevOps teams move fast - but speed without consistency, security, and visibility creates risk. JetBrains Qodana helps DevOps teams build and ship higher-quality, more secure software by making code quality and security checks…

When the US government effectively forced Anthropic to suspend access to some of its newest AI models over security concerns (Fable 5, Mythos 5), much of the debate immediately split into familiar camps. One side saw government overreach. The other saw a necessary intervention against potentially da…

The Rule of Zero, Three, and Five, sometimes written 0/3/5, is a set of C++ guidelines about resource ownership and the special member functions. They exist because the alternatives are double-frees, dangling pointers, and silently broken copies. In this post we’ll work through the rules by tripping…

Most TypeScript projects already run ESLint with @typescript-eslint. That covers a lot: explicit any, floating promises, non-null assertions, and more. If your linting setup is solid, you're catching the obvious issues in the editor before code review. ESLint rules can't produce cross-file findin…

Qodana 2026.1 release brings two important linter updates and a new set of inspections designed to help you catch more issues earlier in development. In this release, Qodana for C/C++ moves out of EAP, Qodana for Rust becomes available in EAP, and several new inspections add protection against subtl…

Writing code that’s clean, readable, and easy to modify without causing unintended side effects is vital to ensuring a seamless development process. Good code encourages a smoother long-term software lifecycle that enables different developers to work with it, applying fixes, updates, and enhancemen…

Dealing with bugs is a natural part of software development. But it can also be among the most costly, especially when they don’t get discovered until later in the development lifecycle. The daunting part is that many bugs aren’t immediately obvious. Issues like memory leaks, default credentials,…