Codacy vs. Findbugs

I recommend it for companies that use several programming languages, as it supports several languages ​​such as Java, Javascript, Python, among others. However, for companies that use only one programming language, there are specific tools for each language that can be more complete in this scenario. I do not recommend it for companies that only use open source software, in which case there are other tools available.

Incentivized

Findbugs is best suited even when you want to adapt to certain coding conventions and discover possible bugs beforehand and it's best suited for the java open source. whether you are a developer or a DevOps engineer you can even use it as a plugin in your Jenkins pipeline or any other build automation server and your developer tool such as visual studio as well.

Incentivized

• Seamless and easy integrations with GitHub for fantastic pipeline of viewing errors.
• Intuitive UI which is easy to customize and built-in patterns recommendations and security checks helps to fix issues faster.
• Metrics and duplication and complexity easily identify areas that need attention to fix it easy.
• Great for open-source projects.

Incentivized

• Scan the code for existing bugs present
• It can detect an vulnerabilities and also show possible bad warnings
• Can help identify errors in advance to avoid code crash post deployment

Incentivized

• There should be customization to get code quality for your own projects if standards are provided.
• Offline or a standalone application is much needed from Codacy to get local support.
• Spots a lot of errors and small ones that don't affect much about quality and are de-facto standards.

Incentivized

• It’s documentation is not always up to date
• Difficulty in finding a prper solution when an issue arises during its configuration
• has limited features

Incentivized

Great company and support team!

Incentivized

Even though it is paid while SonarQube is free, we chose Codacy because it is simpler to configure and maintain the implemented rules. In addition, it offers support for the main programming languages ​​on the market, ensuring that we can continue to use it if we want to use other languages ​​in new products.

Incentivized

Sonar cloud has its own cloud where all the code vulnerabilities are collected and stored as a whole whereas its a plugin that is used in a code itself but the cons is that SonarCloud needs a license if you want to use it privately and also requires personal access token authentication if used with an external service

Incentivized

• The integration of Codacy with new code base is quick and easy.
• Improves our code.
• Easy to detect errors easily.
• Ability to check duplicate codes.

Incentivized

• Its being used overall by most of the teams
• Some of the teams migrating to another testing tool as it has limited features
• Still recommend as its open source and beginners friendly

Incentivized