Skip to content
SPECIFICTION
Get listed

CodeChecker

codechecker.readthedocs.io

WebWindowsmacOSLinuxAPISelf-hosted
Visit codechecker.readthedocs.io
Spec score 7.5 #14 of 25 in C and C++ Static Analysis Tools

What it is

CodeChecker is free, open-source static-analysis infrastructure built on LLVM and Clang Static Analyzer tooling. Its command-line tools run supported analyzers against a JSON compilation database and generate reports. The web interface stores, filters, compares, and visualizes findings, including code bug paths, while reviewers can comment and set status. Reanalysis can be limited to changed files and their dependencies. Listed language coverage includes C/C++, C#, Java, Python, JavaScript, TypeScript, Go, and Markdown. Integrations cover Gerrit, GitLab, and a reusable GitHub Actions workflow. A Visual Studio Code extension runs analysis, reanalyzes saved files, and browses reports. Servers can run locally or in Docker, with PostgreSQL or SQLite storage and configurable authentication. CodeChecker requires Python 3.11 or later.

Spec sheet

Purpose
CodeChecker is static analysis infrastructure built on the LLVM/Clang Static Analyzer toolchain.Read 3 Oct 2026 · codechecker.readthedocs.io
Deployment
The web server can be deployed using Docker, and the documentation links to a CodeChecker server container on Docker Hub.Read 3 Oct 2026 · codechecker.readthedocs.io
Integrations
The documentation describes Gerrit and GitLab review integrations and a reusable GitHub Actions workflow.Read 3 Oct 2026 · codechecker.readthedocs.io
Access control
The server supports authentication and permissions scoped globally or by product; the documentation also describes LDAP and PAM as external authentication methods.Read 3 Oct 2026 · codechecker.readthedocs.io
Analysis
Its command-line tools run supported analyzers against a JSON compilation database and produce analysis results.Read 3 Oct 2026 · codechecker.readthedocs.io
Analysis limitation
Analysis runs locally and can only be invoked from the command line; storing reports to a server also requires the command line.Read 3 Oct 2026 · codechecker.readthedocs.io
Analyzer support
It runs Clang-Tidy, Clang Static Analyzer, Cppcheck, GCC Static Analyzer and Facebook Infer for command-line C/C++ analysis.Read 3 Oct 2026 · codechecker.readthedocs.io
Authentication
Server authentication options include dictionary credentials, PAM, LDAP and OAuth, with OAuth templates documented for GitHub, Google Workspace and Microsoft Entra.Read 3 Oct 2026 · codechecker.readthedocs.io
Broader analyzer support
The supported analyzer list includes tools for C/C++, C#, Java, Python, JavaScript, TypeScript, Go and Markdown.Read 3 Oct 2026 · codechecker.readthedocs.io
Editor extension
The Visual Studio Code extension can run analysis, reanalyze a file when saved, and browse reports in the editor.Read 3 Oct 2026 · codechecker.readthedocs.io
Incremental analysis
CodeChecker can limit reanalysis to changed files and their dependencies.Read 3 Oct 2026 · codechecker.readthedocs.io
Platform limitation
The documentation says Windows installation is available through pip, but build logging is unavailable on Windows.Read 3 Oct 2026 · codechecker.readthedocs.io
Report management
The web interface can store, filter, compare, and visualize analyzer reports, including bug paths in code.Read 3 Oct 2026 · codechecker.readthedocs.io
Review workflow
Results can be filtered, compared between analyses, and reviewed with comments and false-positive suppression.Read 3 Oct 2026 · codechecker.readthedocs.io
Runtime requirement
The packaging requirements specify Python 3 version 3.11 or later.Read 3 Oct 2026 · codechecker.readthedocs.io
Storage
The web application supports PostgreSQL or SQLite backends.Read 3 Oct 2026 · codechecker.readthedocs.io
Supported analyzers
The documentation lists analyzers for C/C++, C#, Java, Python, JavaScript, TypeScript, Go, and Markdown.Read 3 Oct 2026 · codechecker.readthedocs.io

Strong points and limits

Strong points

  • Supports many programming and markup languages
  • Stores and visualizes analyzer reports
  • Limits analysis to changed dependencies
  • Provides Gerrit, GitLab, and GitHub Actions integrations
  • Offers Visual Studio Code support

Limits

  • Analysis runs only from the command line
  • Server report storage also requires command line
  • Windows build logging is unavailable
  • Requires Python 3.11 or later

Who it suits

CodeChecker fits development teams that need analyzers, report review, editor support, and CI integrations across multiple languages. It supports Linux, macOS, Windows, web, API, extensions, and self-hosted deployment.

Verdict

CodeChecker provides a broad analysis and review workflow, from local command-line runs to hosted report management. Its command-line requirement and Windows build-logging limitation should shape deployment plans.

Where Specifiction places it

Alternatives to CodeCheckerAll alternatives →