From e2e177b5eb631db7dd5deefa99926481959d4b5d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Cl=C3=A1udia?= Date: Wed, 12 Aug 2026 13:32:06 +0100 Subject: [PATCH 1/6] docs: reorganize supported languages and tools by scan type Replace the single 10-column, 50-row table with one section per scan type (static analysis, secret detection, dependency vulnerability scanning, etc.), each holding a narrow language-to-tool table. The page's TOC now lists 9 scan types instead of forcing readers to scroll a table that ran off-screen horizontally. --- .../supported-languages-and-tools.md | 991 +++++------------- 1 file changed, 272 insertions(+), 719 deletions(-) diff --git a/docs/getting-started/supported-languages-and-tools.md b/docs/getting-started/supported-languages-and-tools.md index 6b37a2ba42..4bba322621 100644 --- a/docs/getting-started/supported-languages-and-tools.md +++ b/docs/getting-started/supported-languages-and-tools.md @@ -10,7 +10,7 @@ Codacy uses industry-leading tools to perform automatic static code analysis ove - **For cloud infrastructure-as-code platforms**, Codacy provides static analysis and secret detection to enforce security and compliance best practices. -The table below lists all languages that Codacy supports and the corresponding tools that Codacy uses to analyze your source code. Besides this, Codacy uses [cloc](https://github.com/kentcdodds/cloc) to calculate the source lines of code for all supported languages and supports multiple [code coverage report formats](../coverage-reporter/index.md#generating-coverage). +The sections below group the tools that Codacy uses by scan type. Besides this, Codacy uses [cloc](https://github.com/kentcdodds/cloc) to calculate the source lines of code for all supported languages and supports multiple [code coverage report formats](../coverage-reporter/index.md#generating-coverage). +### Complexity See how Codacy calculates [complexity](../faq/code-analysis/which-metrics-does-codacy-calculate.md#complexity). @@ -265,7 +294,7 @@ See how Codacy calculates [complexity](../faq/code-analysis/which-metrics-does-c | Go | Lizard | | Java | Lizard | | JavaScript | Lizard | -| Kotlin | detekt 10 | +| Kotlin | detekt [^different-tools] | | Kubernetes | Lizard | | Objective-C | Lizard | | PHP | Lizard | @@ -276,254 +305,75 @@ See how Codacy calculates [complexity](../faq/code-analysis/which-metrics-does-c | Swift | Lizard | | TypeScript | Lizard | -## License scanning - -| Language | Tools | -|---|---| -| C | Conan | -| C++ | Conan | -| C# | NuGet | -| Dart | Pub | -| Elixir | Hex | -| Go | Go modules | -| Java | Maven | -| JavaScript | npm | -| Kotlin | Maven | -| PHP | Composer | -| Python | PyPI | -| Ruby | Gem | -| Rust | Cargo | -| Scala | Maven | -| Swift | SwiftPM | -| TypeScript | npm | - ## Docker images of supported tools Codacy adds support for new languages and tools by using [a Docker image to run each tool](https://github.com/codacy/codacy-example-tool). The following table lists the Codacy GitHub repositories corresponding to each supported tool. Use these repositories to check the extra plugins supported by each tool or to submit GitHub issues related to each tool. To learn more about the tool versions used by Codacy, [see the latest release notes](../release-notes/index.md). - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Tool nameCodacy GitHub repository
AgentLintercodacy/codacy-agentlinter
aligncheck 3codacy/codacy-aligncheck
Amebacodacy/codacy-ameba
Banditcodacy/codacy-bandit
BiomeJScodacy/codacy-biomejs
Brakeman 7codacy/codacy-brakeman
Checkovcodacy/codacy-checkov
Checkstylecodacy/codacy-checkstyle
Clang-Tidy 3codacy/codacy-clang-tidy
Codacy Scalameta Procodacy/codacy-scalameta
CodeNarccodacy/codacy-codenarc
CoffeeLintcodacy/codacy-coffeelint
Cppcheck 4codacy/codacy-cppcheck
Credocodacy/codacy-credo
dartanalyzer 5codacy/codacy-dartanalyzer
deadcode 3codacy/codacy-deadcode
detektcodacy/codacy-detekt
ESLint 6codacy/codacy-eslint
Flawfindercodacy/codacy-flawfinder
Gosec 3codacy/codacy-gosec
Hadolintcodacy/codacy-hadolint
Jackson Lintercodacy/codacy-jackson-linter
Lizardcodacy/codacy-lizard
markdownlintcodacy/codacy-markdownlint
PHP CS Fixercodacy/codacy-php-cs-fixer
PHP_CodeSniffercodacy/codacy-codesniffer
PHP Mess Detectorcodacy/codacy-phpmd
PMD 6codacy/codacy-pmd7
Prospectorcodacy/codacy-prospector
PSScriptAnalysercodacy/codacy-psscriptanalyzer
Pylintcodacy/codacy-pylint-python3
remark-lintcodacy/codacy-remark-lint
Revivecodacy/codacy-gorevive
RuboCop 6codacy/codacy-rubocop
Ruffcodacy/codacy-ruff
Scalastylecodacy/codacy-scalastyle
Opengrep 1codacy/codacy-opengrep
ShellCheckcodacy/codacy-shellcheck
SonarC#codacy/codacy-sonar-csharp
SonarVBcodacy/codacy-sonar-visual-basic
Spectralcodacy/codacy-spectral
SpotBugs 3codacy/codacy-spotbugs
SQLintcodacy/codacy-sqlint
SQLFluffcodacy/codacy-sqlfluff
Staticcheck 3codacy/codacy-staticcheck
Stylelintcodacy/codacy-stylelint
SwiftLint 6 8codacy/codacy-swiftlint
Trivycodacy/codacy-trivy
TSQLLintcodacy/codacy-tsqllint
Unity Roslyn Analyzers 3codacy/codacy-roslyn
- -1: This tool doesn't support [custom file extensions](../repositories-configure/languages.md#configuring-file-extensions). -2: Currently, only YAML file scanning is supported on this platform. -3: Supported as a [client-side tool](../repositories-configure/local-analysis/client-side-tools.md). -4: Currently, Cppcheck only supports the MISRA guidelines for C. -5: Currently, Codacy only supports including the packages [lints](https://pub.dev/packages/lints) and [flutter_lints](https://pub.dev/packages/flutter_lints) on dartanalyzer configuration files. -6: Doesn't calculate [the number of methods and the complexity per method](../repositories/files.md#file-details) for each file. -7: Due to licensing limitations, Codacy doesn't support the latest version of Brakeman. To analyze your Ruby code for the latest security vulnerabilities, use [Opengrep](https://github.com/opengrep/opengrep), which provides comprehensive and up-to-date security scanning. -8: Supports [reporting warnings or errors](https://realm.github.io/SwiftLint/cyclomatic_complexity.html) on functions above specific complexity thresholds. Enable the rule **Cyclomatic Complexity** on the [Code patterns page](../repositories-configure/configuring-code-patterns.md), or use a [configuration file](https://realm.github.io/SwiftLint/index.html#configuration) to customize the thresholds. -9: Requires the [sbt-dependency-lock](https://github.com/stringbean/sbt-dependency-lock) plugin for generating the lockfile. -10: Codacy may use a different version of this tool for measuring complexity and duplication. +| Tool name | Codacy GitHub repository | +|---|---| +| AgentLinter | codacy/codacy-agentlinter | +| aligncheck [^client-side] | codacy/codacy-aligncheck | +| Ameba | codacy/codacy-ameba | +| Bandit | codacy/codacy-bandit | +| BiomeJS | codacy/codacy-biomejs | +| Brakeman [^opengrep-brakeman] | codacy/codacy-brakeman | +| Checkov | codacy/codacy-checkov | +| Checkstyle | codacy/codacy-checkstyle | +| Clang-Tidy [^client-side] | codacy/codacy-clang-tidy | +| Codacy Scalameta Pro | codacy/codacy-scalameta | +| CodeNarc | codacy/codacy-codenarc | +| CoffeeLint | codacy/codacy-coffeelint | +| Cppcheck [^cppcheck-misra] | codacy/codacy-cppcheck | +| Credo | codacy/codacy-credo | +| dartanalyzer [^dart-limitations] | codacy/codacy-dartanalyzer | +| deadcode [^client-side] | codacy/codacy-deadcode | +| detekt | codacy/codacy-detekt | +| ESLint [^complexity-limitations] | codacy/codacy-eslint | +| Flawfinder | codacy/codacy-flawfinder | +| Gosec [^client-side] | codacy/codacy-gosec | +| Hadolint | codacy/codacy-hadolint | +| Jackson Linter | codacy/codacy-jackson-linter | +| Lizard | codacy/codacy-lizard | +| markdownlint | codacy/codacy-markdownlint | +| PHP CS Fixer | codacy/codacy-php-cs-fixer | +| PHP_CodeSniffer | codacy/codacy-codesniffer | +| PHP Mess Detector | codacy/codacy-phpmd | +| PMD [^complexity-limitations] | codacy/codacy-pmd7 | +| Prospector | codacy/codacy-prospector | +| PSScriptAnalyser | codacy/codacy-psscriptanalyzer | +| Pylint | codacy/codacy-pylint-python3 | +| remark-lint | codacy/codacy-remark-lint | +| Revive | codacy/codacy-gorevive | +| RuboCop [^complexity-limitations] | codacy/codacy-rubocop | +| Ruff | codacy/codacy-ruff | +| Scalastyle | codacy/codacy-scalastyle | +| Opengrep [^opengrep] | codacy/codacy-opengrep | +| ShellCheck | codacy/codacy-shellcheck | +| SonarC# | codacy/codacy-sonar-csharp | +| SonarVB | codacy/codacy-sonar-visual-basic | +| Spectral | codacy/codacy-spectral | +| SpotBugs [^client-side] | codacy/codacy-spotbugs | +| SQLint | codacy/codacy-sqlint | +| SQLFluff | codacy/codacy-sqlfluff | +| Staticcheck [^client-side] | codacy/codacy-staticcheck | +| Stylelint | codacy/codacy-stylelint | +| SwiftLint [^complexity-limitations] [^swiftlint-complexity] | codacy/codacy-swiftlint | +| Trivy | codacy/codacy-trivy | +| TSQLLint | codacy/codacy-tsqllint | +| Unity Roslyn Analyzers [^client-side] | codacy/codacy-roslyn | + +[^opengrep]: This tool doesn't support [custom file extensions](../repositories-configure/languages.md#configuring-file-extensions). +[^yaml-only]: Currently, only YAML file scanning is supported on this platform. +[^client-side]: Supported as a [client-side tool](../repositories-configure/local-analysis/client-side-tools.md). +[^cppcheck-misra]: Currently, Cppcheck only supports the MISRA guidelines for C. +[^dart-limitations]: Currently, Codacy only supports including the packages [lints](https://pub.dev/packages/lints) and [flutter_lints](https://pub.dev/packages/flutter_lints) on dartanalyzer configuration files. +[^complexity-limitations]: Doesn't calculate [the number of methods and the complexity per method](../repositories/files.md#file-details) for each file. +[^opengrep-brakeman]: Due to licensing limitations, Codacy doesn't support the latest version of Brakeman. To analyze your Ruby code for the latest security vulnerabilities, use [Opengrep](https://github.com/opengrep/opengrep), which provides comprehensive and up-to-date security scanning. +[^swiftlint-complexity]: Supports [reporting warnings or errors](https://realm.github.io/SwiftLint/cyclomatic_complexity.html) on functions above specific complexity thresholds. Enable the rule **Cyclomatic Complexity** on the [Code patterns page](../repositories-configure/configuring-code-patterns.md), or use a [configuration file](https://realm.github.io/SwiftLint/index.html#configuration) to customize the thresholds. +[^scala-dependencies]: Requires the [sbt-dependency-lock](https://github.com/stringbean/sbt-dependency-lock) plugin for generating the lockfile. +[^different-tools]: Codacy may use a different version of this tool for measuring complexity and duplication. ## See also diff --git a/mkdocs.yml b/mkdocs.yml index e9183585ac..a1f007a47f 100644 --- a/mkdocs.yml +++ b/mkdocs.yml @@ -124,6 +124,11 @@ markdown_extensions: - attr_list # Allow collapsible sections without introducing custom JavaScript - pymdownx.details + # Render [^id] / [^id]: as numbered, back-linkable footnotes instead of + # hand-rolled HTML, which several pages used and which + # has no custom styling anywhere in the theme. + # https://python-markdown.github.io/extensions/footnotes/ + - footnotes # Add syntax highlighting to code blocks # https://facelessuser.github.io/pymdown-extensions/extensions/highlight/ - pymdownx.highlight diff --git a/theme/stylesheets/content.css b/theme/stylesheets/content.css index 7426ef37b1..bbd4075373 100644 --- a/theme/stylesheets/content.css +++ b/theme/stylesheets/content.css @@ -22,11 +22,19 @@ .md-content__inner > h1 + p { color: var(--docs-text-secondary); font-size: 1.0625rem; line-height: 1.65; } .md-typeset a { color: var(--docs-link); font-weight: 500; text-decoration-thickness: 1px; text-underline-offset: .14em; } .md-typeset a:hover { color: var(--docs-link-hover); } -/* Footnote-marker links (1) inherit sup's - browser-default font-size: smaller, which shrinks the link's hit area to a - few px on a side. Pad and pull back with a matching negative margin so the - tap target grows without shifting surrounding text. */ -.md-typeset a sup { display: inline-block; padding: .35rem; margin: -.35rem; } +/* Footnote-marker links inherit sup's browser-default font-size: smaller, + which shrinks the link's hit area to a few px on a side. Pad and pull back + with a matching negative margin so the tap target grows without shifting + surrounding text. Covers both markup orders: the footnotes extension emits + , hand-rolled footnote HTML elsewhere in the docs emits . */ +.md-typeset a sup, .md-typeset sup a { display: inline-block; padding: .35rem; margin: -.35rem; } +/* A footnote referenced from many rows (common on this site's tool-support + tables) gets one back-reference link per usage from the footnotes + extension. Those render one per line instead of flowing inline, so a + footnote used 20+ times turns into a list item several times taller than + the page. Keep only the first jump-back link; the rest point to the same + definition anyway. */ +.md-typeset .footnote-backref ~ .footnote-backref { display: none; } .md-typeset code { padding: .14em .32em; border-radius: var(--docs-radius); background: var(--docs-bg-subtle); color: var(--docs-text); } .md-typeset :not(pre) > code { border: 1px solid var(--docs-border); } From f3415bdd54dad31323141b338271a19d29415c30 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Cl=C3=A1udia?= Date: Wed, 12 Aug 2026 14:44:15 +0100 Subject: [PATCH 4/6] docs: fix CI failures on supported languages and tools page MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Drop per-row #suggest-fixes anchor links left dangling after the footnote/section rework — htmltest flagged 11 broken hashes since the anchor they used to jump to no longer exists on the page. - Wrap file extensions in the new Overview table as code spans, and the literal github.com domain reference as code, so Vale's Terms rule stops matching them as miscapitalized product names. - Fix "Agentlinter" -> "AgentLinter" to match the tool's actual name used elsewhere on the same page. - Add SQLFluff, pipenv, Bundler, and lockfile to the Vale vocabulary — pre-existing terms that were dormant because reviewdog only lints added lines, and this page's whole table just became "added". Co-Authored-By: Claude Sonnet 5 --- .../config/vocabularies/Codacy/accept.txt | 4 + .../supported-languages-and-tools.md | 106 +++++++++--------- 2 files changed, 57 insertions(+), 53 deletions(-) diff --git a/.github/styles/config/vocabularies/Codacy/accept.txt b/.github/styles/config/vocabularies/Codacy/accept.txt index 598b56e20f..e1b950b4b9 100644 --- a/.github/styles/config/vocabularies/Codacy/accept.txt +++ b/.github/styles/config/vocabularies/Codacy/accept.txt @@ -9,6 +9,7 @@ Bandit Bitbucket Bitnami Brakeman +Bundler bundler-audit Checkov Checkstyle @@ -54,6 +55,7 @@ jscpd JSHint JSP Junie +lockfile markdownlint monorepo namespace @@ -64,6 +66,7 @@ Opengrep PHP_CodeSniffer PHP CS Fixer PHPUnit +pipenv plaintext PMD Promtail @@ -87,6 +90,7 @@ ShellCheck SonarC# SonarVB SpotBugs +SQLFluff SQLint Staticcheck Stylelint diff --git a/docs/getting-started/supported-languages-and-tools.md b/docs/getting-started/supported-languages-and-tools.md index 9097a3969c..681b0dc2c6 100644 --- a/docs/getting-started/supported-languages-and-tools.md +++ b/docs/getting-started/supported-languages-and-tools.md @@ -29,56 +29,56 @@ The sections below group the tools that Codacy uses by scan type. Besides this, | Language | File extensions | Supported scans / Others | |---|---|---| -| Apex | .cls, .trigger | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Duplication](#duplication) | +| Apex | `.cls`, `.trigger` | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Duplication](#duplication) | | AsyncAPI | - | [Static analysis](#static-analysis) | | AWS CloudFormation | - | [Static analysis](#static-analysis), [Secret detection](#secret-detection) | | Azure Resource Manager Templates | - | [Static analysis](#static-analysis) | -| C | .c, .h | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | -| C++ | .cpp, .hpp, .cc, .cxx, .ino | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | -| C# | .cs | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | -| CoffeeScript | .coffee | [Static analysis](#static-analysis), [Duplication](#duplication) | -| Crystal | .cr | [Static analysis](#static-analysis) | -| CSS | .css | [Static analysis](#static-analysis) | -| Dart | .dart | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Duplication](#duplication), [License scanning](#license-scanning) | -| Dockerfile | .dockerfile | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection) | -| Elixir | .ex, .exs | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Duplication](#duplication), [License scanning](#license-scanning) | +| C | `.c`, `.h` | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | +| C++ | `.cpp`, `.hpp`, `.cc`, `.cxx`, `.ino` | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | +| C# | `.cs` | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | +| CoffeeScript | `.coffee` | [Static analysis](#static-analysis), [Duplication](#duplication) | +| Crystal | `.cr` | [Static analysis](#static-analysis) | +| CSS | `.css` | [Static analysis](#static-analysis) | +| Dart | `.dart` | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Duplication](#duplication), [License scanning](#license-scanning) | +| Dockerfile | `.dockerfile` | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection) | +| Elixir | `.ex`, `.exs` | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Duplication](#duplication), [License scanning](#license-scanning) | | GitHub Actions | - | [Static analysis](#static-analysis), [Secret detection](#secret-detection) | -| Go | .go | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | -| Groovy | .groovy | [Static analysis](#static-analysis), [Duplication](#duplication) | +| Go | `.go` | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | +| Groovy | `.groovy` | [Static analysis](#static-analysis), [Duplication](#duplication) | | Helm | - | [Secret detection](#secret-detection) | -| Java | .java | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | -| JavaScript | .js, .jsx, .jsm, .vue, .mjs | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | -| JSON | .json | [Static analysis](#static-analysis), [Secret detection](#secret-detection) | -| JSP | .jsp | [Static analysis](#static-analysis), [Duplication](#duplication) | -| Kotlin | .kt, .kts | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | +| Java | `.java` | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | +| JavaScript | `.js`, `.jsx`, `.jsm`, `.vue`, `.mjs` | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | +| JSON | `.json` | [Static analysis](#static-analysis), [Secret detection](#secret-detection) | +| JSP | `.jsp` | [Static analysis](#static-analysis), [Duplication](#duplication) | +| Kotlin | `.kt`, `.kts` | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | | Kubernetes | - | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection), [Complexity](#complexity) | -| Less | .less | [Static analysis](#static-analysis) | -| Markdown | .md, .markdown, .mdown, .mkdn, .mkd, .mdwn, .mkdown, .ron | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes) | -| Objective-C | .m | [Static analysis](#static-analysis), [Duplication](#duplication), [Complexity](#complexity) | +| Less | `.less` | [Static analysis](#static-analysis) | +| Markdown | `.md`, `.markdown`, `.mdown`, `.mkdn`, `.mkd`, `.mdwn`, `.mkdown`, `.ron` | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes) | +| Objective-C | `.m` | [Static analysis](#static-analysis), [Duplication](#duplication), [Complexity](#complexity) | | OpenAPI | - | [Static analysis](#static-analysis) | -| PHP | .php | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | -| PL/SQL | .trg, .prc, .fnc, .pld, .pls, .plh, .plb, .pck, .pks, .pkh, .pkb, .typ, .tyb, .tps, .tpb | [Static analysis](#static-analysis) | +| PHP | `.php` | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | +| PL/SQL | `.trg`, `.prc`, `.fnc`, `.pld`, `.pls`, `.plh`, `.plb`, `.pck`, `.pks`, `.pkh`, `.pkb`, `.typ`, `.tyb`, `.tps`, `.tpb` | [Static analysis](#static-analysis) | | PostgreSQL | - | [Static analysis](#static-analysis) | -| PowerShell | .ps1, .psc1, .psd1, .psm1, .ps1xml, .pssc, .cdxml, .clixml | [Static analysis](#static-analysis) | -| Python | .py | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | -| Ruby | .rb, .gemspec, .podspec, .jbuilder, .rake, .opal | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | -| Rust | .rs, .rlib | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | -| Sass | .scss | [Static analysis](#static-analysis) | -| Scala | .scala | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | +| PowerShell | `.ps1`, `.psc1`, `.psd1`, `.psm1`, `.ps1xml`, `.pssc`, `.cdxml`, `.clixml` | [Static analysis](#static-analysis) | +| Python | `.py` | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | +| Ruby | `.rb`, `.gemspec`, `.podspec`, `.jbuilder`, `.rake`, `.opal` | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | +| Rust | `.rs`, `.rlib` | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | +| Sass | `.scss` | [Static analysis](#static-analysis) | +| Scala | `.scala` | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | | Serverless Framework | - | [Static analysis](#static-analysis) | -| Shell | .sh, .bash | [Static analysis](#static-analysis), [Secret detection](#secret-detection) | -| Swift | .swift | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | -| SQL | .sql | [Static analysis](#static-analysis) | -| Terraform | .tf | [Static analysis](#static-analysis), [Secret detection](#secret-detection) | -| Transact-SQL | .tsql | [Static analysis](#static-analysis) | -| TypeScript | .ts, .tsx | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | +| Shell | `.sh`, `.bash` | [Static analysis](#static-analysis), [Secret detection](#secret-detection) | +| Swift | `.swift` | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | +| SQL | `.sql` | [Static analysis](#static-analysis) | +| Terraform | `.tf` | [Static analysis](#static-analysis), [Secret detection](#secret-detection) | +| Transact-SQL | `.tsql` | [Static analysis](#static-analysis) | +| TypeScript | `.ts`, `.tsx` | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | | Unity | - | [Static analysis](#static-analysis) | -| Velocity | .vm | [Static analysis](#static-analysis) | -| Visual Basic | .vb | [Static analysis](#static-analysis), [Duplication](#duplication) | -| Visualforce | .component, .page | [Static analysis](#static-analysis), [Duplication](#duplication) | -| XML | .xml, .xsl, .wsdl, .pom | [Static analysis](#static-analysis), [Secret detection](#secret-detection) | -| XSL | .xsl | [Static analysis](#static-analysis) | -| YAML | .yaml, .yml, .env, .env.production, .env.prod, .env.staging, .env.dev, .env.development | [Secret detection](#secret-detection) | +| Velocity | `.vm` | [Static analysis](#static-analysis) | +| Visual Basic | `.vb` | [Static analysis](#static-analysis), [Duplication](#duplication) | +| Visualforce | `.component`, `.page` | [Static analysis](#static-analysis), [Duplication](#duplication) | +| XML | `.xml`, `.xsl`, `.wsdl`, `.pom` | [Static analysis](#static-analysis), [Secret detection](#secret-detection) | +| XSL | `.xsl` | [Static analysis](#static-analysis) | +| YAML | `.yaml`, `.yml`, `.env`, `.env.production`, `.env.prod`, `.env.staging`, `.env.dev`, `.env.development` | [Secret detection](#secret-detection) | ## Static analysis @@ -109,7 +109,7 @@ See how Codacy calculates [static analysis issues](../faq/code-analysis/which-me | Kotlin | detekt, Opengrep [^opengrep], PMD | | Kubernetes | Checkov, Opengrep [^yaml-only] | | Less | Stylelint | -| Markdown | remark-lint, markdownlint, Agentlinter | +| Markdown | remark-lint, markdownlint, AgentLinter | | Objective-C | Clang-Tidy [^client-side] | | OpenAPI | Spectral | | PHP | PHP CS Fixer, PHP_CodeSniffer, PHP Mess Detector, Opengrep [^opengrep] | @@ -195,7 +195,7 @@ Malicious packages identified in the [OpenSSF Malicious Packages database](https | Language | Tools | |---|---| | C# | Trivy, scans packages.lock.json for malicious packages published in NuGet | -| Go | Trivy, scans go.mod for malicious packages published in github.com | +| Go | Trivy, scans go.mod for malicious packages published in github.com | | Java | Trivy, scans pom.xml and gradle.lockfile for malicious packages published in maven | | JavaScript | Trivy, scans package.json and package-lock.json for malicious packages published in npm | | Kotlin | Trivy, scans pom.xml and gradle.lockfile for malicious packages published in maven | @@ -236,17 +236,17 @@ Codacy can [suggest fixes](../repositories-configure/integrations/github-integra | Language | Tools | |---|---| -| C | Opengrep 🔧 | -| C# | Opengrep 🔧 | -| Dockerfile | Opengrep 🔧 | -| Go | Opengrep 🔧 | -| Java | Opengrep 🔧 | -| JavaScript | ESLint 🔧 | -| Kubernetes | Opengrep 🔧 | -| Markdown | markdownlint 🔧 | -| Python | Opengrep 🔧 | -| Ruby | Opengrep 🔧 | -| TypeScript | ESLint 🔧 | +| C | Opengrep | +| C# | Opengrep | +| Dockerfile | Opengrep | +| Go | Opengrep | +| Java | Opengrep | +| JavaScript | ESLint | +| Kubernetes | Opengrep | +| Markdown | markdownlint | +| Python | Opengrep | +| Ruby | Opengrep | +| TypeScript | ESLint | ### Duplication From 740e14e3a4a2a8b48c9c2aa8c46b972fdb52d07b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Cl=C3=A1udia?= Date: Wed, 12 Aug 2026 15:06:26 +0100 Subject: [PATCH 5/6] docs: flatten Others section to H2s, shorten file extensions column Promotes Suggested fixes, Duplication, and Complexity to top-level sections so they show up in the page's on-page TOC, and stacks multi-value file extensions with
instead of a long comma-separated list. Co-Authored-By: Claude Sonnet 5 --- .../supported-languages-and-tools.md | 44 +++++++++---------- 1 file changed, 20 insertions(+), 24 deletions(-) diff --git a/docs/getting-started/supported-languages-and-tools.md b/docs/getting-started/supported-languages-and-tools.md index 681b0dc2c6..55ef4c4f9b 100644 --- a/docs/getting-started/supported-languages-and-tools.md +++ b/docs/getting-started/supported-languages-and-tools.md @@ -27,58 +27,58 @@ The sections below group the tools that Codacy uses by scan type. Besides this, ## Overview -| Language | File extensions | Supported scans / Others | +| Language | File extensions | Supported scans | |---|---|---| -| Apex | `.cls`, `.trigger` | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Duplication](#duplication) | +| Apex | `.cls`
`.trigger` | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Duplication](#duplication) | | AsyncAPI | - | [Static analysis](#static-analysis) | | AWS CloudFormation | - | [Static analysis](#static-analysis), [Secret detection](#secret-detection) | | Azure Resource Manager Templates | - | [Static analysis](#static-analysis) | -| C | `.c`, `.h` | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | -| C++ | `.cpp`, `.hpp`, `.cc`, `.cxx`, `.ino` | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | +| C | `.c`
`.h` | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | +| C++ | `.cpp`
`.hpp`
`.cc`
`.cxx`
`.ino` | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | | C# | `.cs` | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | | CoffeeScript | `.coffee` | [Static analysis](#static-analysis), [Duplication](#duplication) | | Crystal | `.cr` | [Static analysis](#static-analysis) | | CSS | `.css` | [Static analysis](#static-analysis) | | Dart | `.dart` | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Duplication](#duplication), [License scanning](#license-scanning) | | Dockerfile | `.dockerfile` | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection) | -| Elixir | `.ex`, `.exs` | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Duplication](#duplication), [License scanning](#license-scanning) | +| Elixir | `.ex`
`.exs` | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Duplication](#duplication), [License scanning](#license-scanning) | | GitHub Actions | - | [Static analysis](#static-analysis), [Secret detection](#secret-detection) | | Go | `.go` | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | | Groovy | `.groovy` | [Static analysis](#static-analysis), [Duplication](#duplication) | | Helm | - | [Secret detection](#secret-detection) | | Java | `.java` | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | -| JavaScript | `.js`, `.jsx`, `.jsm`, `.vue`, `.mjs` | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | +| JavaScript | `.js`
`.jsx`
`.jsm`
`.vue`
`.mjs` | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | | JSON | `.json` | [Static analysis](#static-analysis), [Secret detection](#secret-detection) | | JSP | `.jsp` | [Static analysis](#static-analysis), [Duplication](#duplication) | -| Kotlin | `.kt`, `.kts` | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | +| Kotlin | `.kt`
`.kts` | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | | Kubernetes | - | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection), [Complexity](#complexity) | | Less | `.less` | [Static analysis](#static-analysis) | -| Markdown | `.md`, `.markdown`, `.mdown`, `.mkdn`, `.mkd`, `.mdwn`, `.mkdown`, `.ron` | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes) | +| Markdown | `.md`
`.markdown`
`.mdown`
`.mkdn`
`.mkd`
`.mdwn`
`.mkdown`
`.ron` | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes) | | Objective-C | `.m` | [Static analysis](#static-analysis), [Duplication](#duplication), [Complexity](#complexity) | | OpenAPI | - | [Static analysis](#static-analysis) | | PHP | `.php` | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | -| PL/SQL | `.trg`, `.prc`, `.fnc`, `.pld`, `.pls`, `.plh`, `.plb`, `.pck`, `.pks`, `.pkh`, `.pkb`, `.typ`, `.tyb`, `.tps`, `.tpb` | [Static analysis](#static-analysis) | +| PL/SQL | `.trg`
`.prc`
`.fnc`
`.pld`
`.pls`
`.plh`
`.plb`
`.pck`
`.pks`
`.pkh`
`.pkb`
`.typ`
`.tyb`
`.tps`
`.tpb` | [Static analysis](#static-analysis) | | PostgreSQL | - | [Static analysis](#static-analysis) | -| PowerShell | `.ps1`, `.psc1`, `.psd1`, `.psm1`, `.ps1xml`, `.pssc`, `.cdxml`, `.clixml` | [Static analysis](#static-analysis) | +| PowerShell | `.ps1`
`.psc1`
`.psd1`
`.psm1`
`.ps1xml`
`.pssc`
`.cdxml`
`.clixml` | [Static analysis](#static-analysis) | | Python | `.py` | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | -| Ruby | `.rb`, `.gemspec`, `.podspec`, `.jbuilder`, `.rake`, `.opal` | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | -| Rust | `.rs`, `.rlib` | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | +| Ruby | `.rb`
`.gemspec`
`.podspec`
`.jbuilder`
`.rake`
`.opal` | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | +| Rust | `.rs`
`.rlib` | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | | Sass | `.scss` | [Static analysis](#static-analysis) | | Scala | `.scala` | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | | Serverless Framework | - | [Static analysis](#static-analysis) | -| Shell | `.sh`, `.bash` | [Static analysis](#static-analysis), [Secret detection](#secret-detection) | +| Shell | `.sh`
`.bash` | [Static analysis](#static-analysis), [Secret detection](#secret-detection) | | Swift | `.swift` | [Static analysis](#static-analysis), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | | SQL | `.sql` | [Static analysis](#static-analysis) | | Terraform | `.tf` | [Static analysis](#static-analysis), [Secret detection](#secret-detection) | | Transact-SQL | `.tsql` | [Static analysis](#static-analysis) | -| TypeScript | `.ts`, `.tsx` | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | +| TypeScript | `.ts`
`.tsx` | [Static analysis](#static-analysis), [Suggested fixes](#suggested-fixes), [Secret detection](#secret-detection), [Dependency vulnerability scanning](#dependency-vulnerability-scanning), [Malicious packages detection](#malicious-packages-detection), [Duplication](#duplication), [Complexity](#complexity), [License scanning](#license-scanning) | | Unity | - | [Static analysis](#static-analysis) | | Velocity | `.vm` | [Static analysis](#static-analysis) | | Visual Basic | `.vb` | [Static analysis](#static-analysis), [Duplication](#duplication) | -| Visualforce | `.component`, `.page` | [Static analysis](#static-analysis), [Duplication](#duplication) | -| XML | `.xml`, `.xsl`, `.wsdl`, `.pom` | [Static analysis](#static-analysis), [Secret detection](#secret-detection) | +| Visualforce | `.component`
`.page` | [Static analysis](#static-analysis), [Duplication](#duplication) | +| XML | `.xml`
`.xsl`
`.wsdl`
`.pom` | [Static analysis](#static-analysis), [Secret detection](#secret-detection) | | XSL | `.xsl` | [Static analysis](#static-analysis) | -| YAML | `.yaml`, `.yml`, `.env`, `.env.production`, `.env.prod`, `.env.staging`, `.env.dev`, `.env.development` | [Secret detection](#secret-detection) | +| YAML | `.yaml`
`.yml`
`.env`
`.env.production`
`.env.prod`
`.env.staging`
`.env.dev`
`.env.development` | [Secret detection](#secret-detection) | ## Static analysis @@ -226,11 +226,7 @@ Malicious packages identified in the [OpenSSF Malicious Packages database](https | Swift | SwiftPM | | TypeScript | npm | -## Others - -Less central capabilities that don't map to a single scan type. - -### Suggested fixes +## Suggested fixes Codacy can [suggest fixes](../repositories-configure/integrations/github-integration.md#suggest-fixes) for issues identified by these tools: @@ -248,7 +244,7 @@ Codacy can [suggest fixes](../repositories-configure/integrations/github-integra | Ruby | Opengrep | | TypeScript | ESLint | -### Duplication +## Duplication See how Codacy calculates [duplication](../faq/code-analysis/which-metrics-does-codacy-calculate.md#duplication). @@ -282,7 +278,7 @@ See how Codacy calculates [duplication](../faq/code-analysis/which-metrics-does- complexity metric (see which-metrics-does-codacy-calculate.md#complexity), which is calculated per file rather than reported as an issue by the tool below, and whether that metric is supported for a different set of languages than this tool list. --> -### Complexity +## Complexity See how Codacy calculates [complexity](../faq/code-analysis/which-metrics-does-codacy-calculate.md#complexity). From 276bebdd3582a73b240c972c9b679c752c80f1b8 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Cl=C3=A1udia?= Date: Wed, 12 Aug 2026 15:51:18 +0100 Subject: [PATCH 6/6] docs: fix Prospector link, rename License scanning column to Package managers MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Prospector pointed to landscapeio/prospector2, an unrelated repo, instead of landscapeio/prospector (already correct elsewhere on the page) — caught by AI PR review. Also renames the License scanning table's "Tools" header to "Package managers" since it lists Conan, NuGet, npm, etc. Co-Authored-By: Claude Sonnet 5 --- docs/getting-started/supported-languages-and-tools.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/getting-started/supported-languages-and-tools.md b/docs/getting-started/supported-languages-and-tools.md index 55ef4c4f9b..58fa5f888d 100644 --- a/docs/getting-started/supported-languages-and-tools.md +++ b/docs/getting-started/supported-languages-and-tools.md @@ -207,7 +207,7 @@ Malicious packages identified in the [OpenSSF Malicious Packages database](https ## License scanning -| Language | Tools | +| Language | Package managers | |---|---| | C | Conan | | C++ | Conan | @@ -337,7 +337,7 @@ The following table lists the Codacy GitHub repositories corresponding to each s | PHP_CodeSniffer | codacy/codacy-codesniffer | | PHP Mess Detector | codacy/codacy-phpmd | | PMD [^complexity-limitations] | codacy/codacy-pmd7 | -| Prospector | codacy/codacy-prospector | +| Prospector | codacy/codacy-prospector | | PSScriptAnalyser | codacy/codacy-psscriptanalyzer | | Pylint | codacy/codacy-pylint-python3 | | remark-lint | codacy/codacy-remark-lint |