Codacy vs. Doppler vs. GitGuardian

I recommend it for companies that use several programming languages, as it supports several languages ​​such as Java, Javascript, Python, among others. However, for companies that use only one programming language, there are specific tools for each language that can be more complete in this scenario. I do not recommend it for companies that only use open source software, in which case there are other tools available.

Incentivized

Doppler largely saved us time by guaranteeing that the factors in our environment remained constant across projects and engineers' local surroundings. When onboarding new team members, access to production deploys is prevented by restricting access tokens to development and staging environments. Enhancing the degree of control that application teams have over their deployments (our DevOps team assists with initial setup, and app developers have access to the Doppler UI for making adjustments/changes)

Incentivized

I do think it'll absolutely fit everyone who codes integrates with another platform or services. We all forget that one credentials one in a while, and especially those who managed public repository, it is important to keep an eye on accidentally committed credentials. While I think you don't really needs it for personal project, it's a nice to have, you don't want to waie up to 50k USD of sudden surcharge on resources you don't use.

Incentivized

• Seamless and easy integrations with GitHub for fantastic pipeline of viewing errors.
• Intuitive UI which is easy to customize and built-in patterns recommendations and security checks helps to fix issues faster.
• Metrics and duplication and complexity easily identify areas that need attention to fix it easy.
• Great for open-source projects.

Incentivized

• Easier to save secrets
• Hassle free for DevOps team
• All secrets can be used and integrated much easier than before
• Syncing and managing all secrets is much easier
• Even versioning is great feature to consider

Incentivized

• GitGuardian monitors every public or private GitHub commit ( that have GitGuardian installed) and event in real-time for secrets and sensitive data. In a leak scenario it immediately notifies us.
• It uses sophisticated pattern matching techniques to detect credentials that cannot be strictly defined with a distinctive pattern (like unprefixed credentials)
• It covers several API providers, database connection strings, private keys, certificates, usernames and passwords etc
• GitGuardian have high True Positive Rate of around 91% and reduces alert fatigue with smart occurrences regrouping

• There should be customization to get code quality for your own projects if standards are provided.
• Offline or a standalone application is much needed from Codacy to get local support.
• Spots a lot of errors and small ones that don't affect much about quality and are de-facto standards.

Incentivized

• I wish I could grant developers more granular access.
• It takes some effort to set up environments, and their documentation and tooling might be improved.

Incentivized

• Improved user interface: It would be beneficial to have a more intuitive and user-friendly interface for Internal Monitoring on GitGuardian. This would make it easier for users to quickly access the data they need and understand the results of their scans.
• Automated alerts: It would be helpful to have automated alerts when certain conditions are met, such as when a scan reveals sensitive data or when a new repository is created. This would help users stay informed and take action in a timely manner.
• More detailed reports: Currently, Internal Monitoring reports are limited in terms of the depth of information they provide. It would be useful to have more detailed reports that include additional metrics, such as the number of repositories scanned and the types of sensitive data found.
• Faster scan times: Scan times can be slow at times, making it difficult to stay on top of changes in repositories quickly. It would be beneficial to have faster scan times so that users can take action quickly when needed.

Great company and support team!

Incentivized

Even though it is paid while SonarQube is free, we chose Codacy because it is simpler to configure and maintain the implemented rules. In addition, it offers support for the main programming languages ​​on the market, ensuring that we can continue to use it if we want to use other languages ​​in new products.

Incentivized

Doppler is really good at SecOps compared to other applications. It provides the best services like GitHub integration, cloud platform integrations, and managing secrets. It has the real functionality of synchronizing the secrets and safekeeping them. As it has a complete hand over multiple clouds it makes developers integrate over across cloud platforms. Hence, it is highly recommended to use and imply on.

Incentivized

I've evaluated quite a few other tools, like git-secrets, Git-leaks, scan, and maybe a few more. They're all great but quite surprisingly none of them detected Github OAuth Secrets for us. A lot of the FOSS tools out there focus on much simpler, generic secrets, which is good in itself but with GitGuardian, it was dead simple from day one. I just connected our Github Account and set up the gg-shield cli and that was all.

Incentivized

• The integration of Codacy with new code base is quick and easy.
• Improves our code.
• Easy to detect errors easily.
• Ability to check duplicate codes.

Incentivized

• ROI is increased

Incentivized

• GitGuardian Internal Monitoring has had a positive impact on our overall business objectives. By providing visibility into our code repositories and alerting us to potential security risks, we have been able to identify and mitigate security issues before they become a problem. This has allowed us to focus more on developing our product and less on responding to security incidents. We have also seen an increase in customer confidence in our product as a result of using GitGuardian Internal Monitoring, which has led to increased customer loyalty and retention. Overall, the ROI of using GitGuardian Internal Monitoring has been very positive for our business.
• We have seen an increase in the security of our codebase, as well as an improvement in the speed and accuracy of our code reviews. This has enabled us to quickly identify and address any potential security issues before they become a problem. Additionally, we have seen an increase in our ROI as a result of using GitGuardian Internal Monitoring, as it has allowed us to save time and money by preventing costly security breaches.
• No more.