Gerrit Code Review vs GitHub CodeQL
Gerrit Code Review
gerritcodereview.com
GitHub CodeQL
codeql.github.comSide by side
| Figure | Gerrit Code Review | GitHub CodeQL |
|---|---|---|
| Price from | Free | $30/mo |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | Yes | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 2 | 5 |
| Spec score · Source Code Management | 8.8 (#3) | 8.5 (#10) |
| Spec score · Git Platforms | 8.7 (#3) | 8.4 (#6) |
| Spec score · Game Version Control Software | 8.8 (#5) | 8.5 (#9) |
| Spec score · Repository Management Software | 8.8 (#4) | 8.4 (#9) |
| Purpose | Gerrit is a web-based code review system for collaborating on Git repositories through patchset-based review workflows. | CodeQL is a language and toolchain for code analysis that treats code as data. |
Plans
Gerrit Code Review
- Gerrit Code ReviewFree
- Gerrit Code Review Open SourceFree
GitHub CodeQL
- Free for research and open sourceFree
- GitHub Code Security$30 a month
- CodeQL for open source and researchFree
- GitHub Code Security$30 a month
- GitHub Free with CodeQL code scanningPrice not published
In their own words
Gerrit Code Review
Gerrit Code Review is a free, self-hosted web system for collaborative review of Git repositories through patchset workflows. Teams can discuss changes with inline comments, manage patchsets, and configure approval processes. Fine-grained access controls determine who can access code. Gerrit lists integrations with Jenkins, GitHub Actions, Zuul, REST API, and webhooks for CI/CD and other automation. The project says global replication and active-active clustering can support thousands of concurrent developers, and presents the system for small teams through large organizations, including regulated industries. Gerrit is Apache 2.0 licensed. Its listed plan costs nothing, with no licensing fees and use at any scale without restrictions. Supported platforms are API, Linux, self-hosted, and web. Documentation and community provide support; the community supports the last three releases on a best-effort basis without a guaranteed response or resolution SLA. Plugin reliability is not guaranteed, and ongoing maintenance is not guaranteed for plugins without direct maintainers.
GitHub CodeQL
GitHub CodeQL has no write-up on Specifiction yet; its figures are above.