Coverity Scan vs GitHub CodeQL
Coverity Scan
scan.coverity.com
GitHub CodeQL
codeql.github.comSide by side
| Figure | Coverity Scan | GitHub CodeQL |
|---|---|---|
| Price from | Free | $30/mo |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | — | Yes |
| macOS | — | Yes |
| Linux | — | Yes |
| API | Yes | — |
| Self-hosted | — | Yes |
| Plans published | 1 | 5 |
| Spec score · Static Analysis Tools | 7.8 (#16) | 8.5 (#8) |
| Purpose | Coverity Scan provides static analysis results for registered open source projects. | CodeQL is a language and toolchain for code analysis that treats code as data. |
Plans
GitHub CodeQL
- Free for research and open sourceFree
- GitHub Code Security$30 a month
- CodeQL for open source and researchFree
- GitHub Code Security$30 a month
- GitHub Free with CodeQL code scanningPrice not published
In their own words
Coverity Scan
Coverity Scan has no write-up on Specifiction yet; its figures are above.
GitHub CodeQL
GitHub CodeQL has no write-up on Specifiction yet; its figures are above.