https://cybertoolchain.io/tools/codacy New releases and features in Codacy, tracked by The Cyber Toolchain. en Sun, 01 Nov 2026 00:00:00 GMT https://docs.codacy.com/release-notes/cloud/cloud-2026-11-stylelint-a11y-patterns-renamed/ https://docs.codacy.com/release-notes/cloud/cloud-2026-11-stylelint-a11y-patterns-renamed/ Sun, 01 Nov 2026 00:00:00 GMT Breaking changes: • The 12 Stylelint accessibility pattern IDs are renamed with the `a11y_` prefix (e.g. `content-property-no-static-value` becomes `a11y_content-property-no-static-value`); any coding standard, repository code-pattern config, or Codacy Analysis CLI setup that references the old IDs must be updated, and the renamed patterns start disabled so previously enabled checks will no longer run until re-enabled. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://api.codacy.com/api/api-docs/swagger.yaml https://api.codacy.com/api/api-docs/swagger.yaml Fri, 23 Oct 2026 08:08:26 GMT API surface changed: +2 endpoints, 4 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint POST /organizations/{provider}/{remoteOrganizationName}/security/dashboard/remediation/history/search⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint POST /organizations/{provider}/{remoteOrganizationName}/security/dashboard/remediation/search Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://api.codacy.com/api/api-docs/swagger.yaml https://api.codacy.com/api/api-docs/swagger.yaml Tue, 20 Oct 2026 08:04:07 GMT API surface changed: 1 deprecated⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Breaking changes: • Deprecated endpoint POST /organizations/{provider}/{remoteOrganizationName}/billing/sync (still works) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://api.codacy.com/api/api-docs/swagger.yaml https://api.codacy.com/api/api-docs/swagger.yaml Fri, 25 Sep 2026 13:22:11 GMT API surface changed: +3 endpoints, 12 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /organizations/{provider}/{remoteOrganizationName}/integrations/webhooks/{webhookId}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint GET /organizations/{provider}/{remoteOrganizationName}/integrations/webhooks • New endpoint POST /organizations/{provider}/{remoteOrganizationName}/integrations/webhooks Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://api.codacy.com/api/api-docs/swagger.yaml https://api.codacy.com/api/api-docs/swagger.yaml Fri, 04 Sep 2026 07:49:31 GMT API surface changed: 4 modified • GET /analysis/organizations/{provider}/{remoteOrganizationName}/repositories: response schema changed • GET /analysis/organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}: response schema changed • POST /analysis/organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/autoconfig: response schema changed • POST /search/analysis/organizations/{provider}/{remoteOrganizationName}/repositories: response schema changed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2026-09-adding-oxlint/ https://docs.codacy.com/release-notes/cloud/cloud-2026-09-adding-oxlint/ Thu, 03 Sep 2026 07:33:00 GMT Codacy adds Oxlint, a Rust-based JS/TS linter, as a fully integrated analysis engine with broad ESLint-compatible rule coverage. • Adds Oxlint as a supported Codacy engine for JavaScript and TypeScript, covering correctness, style, and best-practice rule categories including ESLint core rules, `typescript-eslint`, React ecosystem (`react`, `react-hooks`, `react-refresh`, `react-perf`), `@next/eslint-plugin-next`, `eslint-plugin-unicorn`, testing frameworks (`jest`, `vitest`), `eslint-plugin-vue`, `import`, `jsdoc`, `jsx-a11y`, `n` (Node), and `promise`. • Supports repository-level configuration via `.oxlintrc.json`, `.oxlintrc.jsonc`, `oxlint.config.json`, or `oxlint.config.jsonc` files, which Codacy will detect and apply automatically during analysis. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://api.codacy.com/api/api-docs/swagger.yaml https://api.codacy.com/api/api-docs/swagger.yaml Fri, 28 Aug 2026 19:46:13 GMT API surface changed: 6 modified • GET /analysis/organizations/{provider}/{remoteOrganizationName}/pull-requests: response schema changed • GET /analysis/organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/commits/{commitUuid}/logs: response schema changed • GET /analysis/organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/pull-requests: response schema changed • GET /analysis/organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/pull-requests/{pullRequestNumber}: response schema changed • GET /analysis/organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/pull-requests/{pullRequestNumber}/logs: response schema changed • GET /coverage/organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/pull-requests/{pullRequestNumber}: response schema changed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://api.codacy.com/api/api-docs/swagger.yaml https://api.codacy.com/api/api-docs/swagger.yaml Sun, 16 Aug 2026 09:25:01 GMT API surface changed: 4 modified • GET /organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/tokens: response schema changed • GET /user/tokens: response schema changed • POST /organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/tokens: response schema changed • POST /user/tokens: response schema changed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2026-01-adding-golangci-lint/ https://docs.codacy.com/release-notes/cloud/cloud-2026-01-adding-golangci-lint/ Sat, 08 Aug 2026 04:44:42 GMT Codacy adds GolangCI-Lint as a client-side Go analysis tool, uploadable to the Codacy dashboard. • Adds GolangCI-Lint as a supported client-side tool for Go projects: run it locally or in CI, then upload results to Codacy for analysis and reporting. • GolangCI-Lint is not enabled by default on existing repositories — must be enabled manually in repository settings to avoid a large volume of new issues appearing unexpectedly. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files/ https://docs.codacy.com/release-notes/cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files/ Sat, 08 Aug 2026 04:44:42 GMT Codacy adds PHP CS Fixer as a new analysis engine and gains support for Checkov configuration files. • Adds PHP CS Fixer as a new supported Codacy engine for PHP code-style analysis, configurable via the Codacy UI or your repository's own `.php-cs-fixer.dist.php` or `.php-cs-fixer.php` file (Codacy-selected patterns take precedence over the repo config file). • Adds support for Checkov configuration files (`.checkov.yaml` or `.checkov.yml`) in the repository, enabled via Repository > Code Patterns > Checkov > "Use Checkov configuration file found in the repository". Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2026-07-adding-shellcheck-config-file/ https://docs.codacy.com/release-notes/cloud/cloud-2026-07-adding-shellcheck-config-file/ Sat, 08 Aug 2026 04:44:42 GMT Codacy now reads a `.shellcheckrc` file from your repository so ShellCheck settings no longer have to be managed through the UI. • Adds support for a `.shellcheckrc` configuration file in the repository root to drive ShellCheck analysis, replacing UI-only configuration. • Adds a new toggle — "Use Shellcheck configuration file found in the repository" — under Repository > Code Patterns > Shellcheck to activate file-based config. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://api.codacy.com/api/api-docs/swagger.yaml https://api.codacy.com/api/api-docs/swagger.yaml Wed, 05 Aug 2026 11:23:32 GMT API surface changed: +1 endpoint, 4 modified • New endpoint POST /organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/tokens/delete • GET /organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/tokens: response schema changed • GET /user/tokens: response schema changed • POST /organizations/{provider}/{remoteOrganizationName}/repositories/{repositoryName}/tokens: request body changed; response schema changed • POST /user/tokens: response schema changed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://api.codacy.com/api/api-docs/swagger.yaml https://api.codacy.com/api/api-docs/swagger.yaml Sun, 02 Aug 2026 10:46:32 GMT Codacy now publishes an API — 287 endpoints across 29 areas: Analysis, Repository, Organization, … • Analysis (49 endpoints) — create, read, update • Repository (47 endpoints) — create, read, update, delete • Organization (32 endpoints) — create, read, update, delete • Security (20 endpoints) — create, read, update, delete • Account (17 endpoints) — create, read, update, delete • Coding Standards (17 endpoints) — create, read, update, delete • Metrics (13 endpoints) — create, read • Gate Policies (9 endpoints) — create, read, update, delete • 21 more areas: Sbom, Admin, Aiinventory, Enterprise, Jira, People, Segments, Tools, Coverage, Dast, Reports, File, Billing, Integrations, Language Settings, App, Configuration, Health, Languages, Session, Version Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/cloud/cloud-2026-07-adding-shellcheck-config-file/ https://docs.codacy.com/cloud/cloud-2026-07-adding-shellcheck-config-file/ Thu, 30 Jul 2026 15:46:42 GMT Codacy now respects ShellCheck configuration files in your repository. • Supports ShellCheck configuration files, allowing per-repository ShellCheck rule customization without modifying Codacy settings. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files/ https://docs.codacy.com/cloud/cloud-2026-07-adding-phpcsfixer-checkov-config-files/ Mon, 27 Jul 2026 16:10:15 GMT Codacy adds PHP CS Fixer as a new tool and gains support for Checkov configuration files. • Adds PHP CS Fixer as a supported static analysis tool for PHP code style enforcement. • Adds support for Checkov configuration files, enabling repository-level Checkov settings to be recognized by Codacy. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/cloud/cloud-2026-01-adding-golangci-lint/ https://docs.codacy.com/cloud/cloud-2026-01-adding-golangci-lint/ Thu, 23 Jul 2026 15:49:55 GMT Codacy adds GolangCI-Lint as a supported static analysis tool for Go repositories. • Adds GolangCI-Lint as a supported code analysis tool, enabling automated linting for Go projects within Codacy. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2026-06/ https://docs.codacy.com/release-notes/cloud/cloud-2026-06/ Mon, 01 Jun 2026 00:00:00 GMT Codacy Cloud June 2026 adds proxy support for Guardrails and dependency chain visibility • Adds proxy configuration support to Guardrails for restricted network environments • Improves dependency chain visibility in the UI to clarify how vulnerable dependencies are introduced • Makes the CI/CD setup option more prominent in container scanning Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2026-05/ https://docs.codacy.com/release-notes/cloud/cloud-2026-05/ Fri, 01 May 2026 00:00:00 GMT Codacy Cloud May 2026 adds YAML scanning for .env files and manual AI PR review trigger • Supports `.env`, `.env.production`, `.env.prod`, and `.env.staging` files as YAML language so all YAML tools can scan them. • Allows manual triggering of the Draft PR AI Review via a button on the summary, as it no longer runs automatically for draft PRs. Breaking changes: • AI suggestions in GitHub are deprecated and will stop working; users must switch to the PR reviewer. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2026-04/ https://docs.codacy.com/release-notes/cloud/cloud-2026-04/ Wed, 01 Apr 2026 00:00:00 GMT Codacy Cloud April 2026 introduces Context-Aware AI Feedback Loops and a new Pull Request Summary experience. • Adds context-aware feedback loops for the AI Reviewer on GitHub PRs • Introduces the Pull Request Summary UI to replace legacy coverage summary settings Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2026-03/ https://docs.codacy.com/release-notes/cloud/cloud-2026-03/ Sun, 01 Mar 2026 00:00:00 GMT Codacy Cloud March 2026 adds customizable AI instructions via review.md and manual AI triggers. • `review.md` file support to customize AI reviewer output and coding conventions • New 'Run review' button on the Pull Request Summary page for manual AI review triggers • AI-generated test coverage suggestions with ready-to-use prompts for coding agents Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2026-03-github-integration-settings-changes/ https://docs.codacy.com/release-notes/cloud/cloud-2026-03-github-integration-settings-changes/ Sun, 01 Mar 2026 00:00:00 GMT Codacy Cloud March 2026 deprecates AI-enhanced comments (Beta) in favor of AI Reviewer and consolidates coverage summary. • Deprecates AI-enhanced comments (Beta) and migrates enabled repos to the `AI Reviewer` on March 17, 2026 • Moves coverage data into the Pull request review comment, removing the standalone `Coverage summary` setting Breaking changes: • The AI-enhanced comments (Beta) setting is removed on March 17, 2026 • The `Coverage summary` setting is removed as coverage data moves to the Pull request review comment Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2026-02/ https://docs.codacy.com/release-notes/cloud/cloud-2026-02/ Sun, 01 Feb 2026 00:00:00 GMT Codacy adds Organization Overview Dashboard and SRM text search; migrates engine to Opengrep. • Launched an Organization Overview Dashboard with metrics for code health, security grade, complexity, duplication, and coverage. • Added text search filter capability within the SRM (Security Risk Management) tab findings view. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2026-01/ https://docs.codacy.com/release-notes/cloud/cloud-2026-01/ Thu, 01 Jan 2026 00:00:00 GMT Codacy Cloud Jan 2026 adds GolangCI-Lint integration and VS Code setup enhancements • Adds a new GolangCI-Lint wrapper that integrates over 100 linters to improve Go code quality checks • Introduces a dedicated 'VS Code Setup Section' in the extension for streamlined onboarding • Adds a guided walkthrough step-by-step guide within the VS Code extension setup process Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2026-01-adding-golangci-lint/ https://docs.codacy.com/release-notes/cloud/cloud-2026-01-adding-golangci-lint/ Thu, 01 Jan 2026 00:00:00 GMT Codacy now supports GolangCI-Lint results upload. The tool is client-side and disabled by default on existing repos. • Codacy now supports GolangCI-Lint results upload. The tool is client-side and disabled by default on existing repos. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2025-12/ https://docs.codacy.com/release-notes/cloud/cloud-2025-12/ Mon, 01 Dec 2025 00:00:00 GMT Codacy Cloud Dec 2025 adds PR Reviewer, SBOM export, AI Risk Hub, ignore reasons, and API endpoint update • Adds `PR Reviewer` for contextual GitHub Pull Request reviews using security, duplication, complexity, and coverage metrics • Adds `Ignore Reason` field for ignored issues in repositories and the Security Dashboard (Accepted use, False positive, Not exploitable, Test code, External code) • Adds `Export SBOM` feature on the SRM Dependencies tab • Adds `AI Risk Hub` interface to evaluate risk of AI tool adoption • Updates dependencies list filters to support search by name, repositories, segments, severities, and license risk levels • Replaces the deprecated `getCodeBlock` API endpoint with `getFileContent` (TAROT-3580) • Adds `GolangCI-Lint` 2.7.2 as a new supported tool Breaking changes: • The `getCodeBlock` API endpoint was deleted; use `getFileContent` instead (different path parameters) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2025-11/ https://docs.codacy.com/release-notes/cloud/cloud-2025-11/ Sat, 01 Nov 2025 00:00:00 GMT Codacy Cloud November 2025 adds malicious package detection and False Positive PR comments • Adds Malicious Package Detection to automatically flag packages identified by OSSF in Pull Requests and nightly scans for clients with SCA enabled. • Adds a new workflow where False Positive detection leaves a comment directly on the Pull Request for immediate review. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2025-10/ https://docs.codacy.com/release-notes/cloud/cloud-2025-10/ Wed, 01 Oct 2025 00:00:00 GMT Codacy Cloud October 2025 adds false positive detection and tooling updates • Adds False Positive Detection capability to flag potentially false positive issues on the Business tier. • Enhances performance on the Open Issues dashboard for faster loading and navigation. • Improves responsiveness when adding repositories on the Manage Repositories page. • Adds support for additional Markdownlint configuration files. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2025-09/ https://docs.codacy.com/release-notes/cloud/cloud-2025-09/ Mon, 01 Sep 2025 00:00:00 GMT Codacy Cloud adds OpenSSF Scorecard integration and trims deprecated patterns • Adds `OpenSSF Scorecard` report view directly from dependency details to assess open-source component security posture. • Removes the `Trivy_vulnerability` pattern, replacing it with `Trivy_vulnerability_critical` and `Trivy_vulnerability_high` for precise vulnerability tracking. • Enhances issue uniqueness detection to ensure all unique issues reported on the same line by tools like Trivy and Prospector are visible. Breaking changes: • The `Trivy_vulnerability` pattern is removed; users must update queries or filters referencing it to use `Trivy_vulnerability_critical` or `Trivy_vulnerability_high`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2025-08/ https://docs.codacy.com/release-notes/cloud/cloud-2025-08/ Fri, 01 Aug 2025 00:00:00 GMT Codacy Cloud August 2025 adds Dark Mode and dependency license insights in the Security & Risk Management dashboard. • Adds Dark Mode to the Codacy app UI for a visually appealing experience • Shows license information for every dependency and repository directly in the Security & Risk Management dashboard’s Dependencies tab Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2025-07/ https://docs.codacy.com/release-notes/cloud/cloud-2025-07/ Tue, 01 Jul 2025 00:00:00 GMT Codacy Cloud July 2025 adds severity gates for security, API token expiration, and Lizard as default complexity tool • Add `severity` gate policy to enforce minimum severity thresholds for security issues in Codacy Gate Policies • Filter segments within Coding Standards and Gate Policies by repository using `Codacy Segments` integration with GitHub custom properties • Scan DAST API targets without authentication headers for Business tier customers using the `Static API authentication for DAST targets` capability • Use Lizard as the default complexity tool supporting C, C++, Objective-C, Rust, C#, Go, Java, JavaScript, TypeScript, PHP, Python, Ruby, Scala, and Swift Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2025-05/ https://docs.codacy.com/release-notes/cloud/cloud-2025-05/ Thu, 01 May 2025 00:00:00 GMT Codacy Guardrails MCP Server now supports Windows via WSL and auto-updates rules on Git load. • `Codacy Guardrails` documentation is launched for reference. • Codacy Guardrails MCP Server now runs on Windows environments via Windows Subsystem for Linux (WSL). • Automatic Rule File Updates on Git Load: When the MCP Server is installed, loading a Git repository will now automatically update the rules file. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/self-hosted/self-hosted-v15.0.0/ https://docs.codacy.com/release-notes/self-hosted/self-hosted-v15.0.0/ Thu, 10 Apr 2025 00:00:00 GMT Codacy Self-hosted v15.0.0 adds Kubernetes 1.30 support • Added support for Kubernetes 1.30 Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2025-04/ https://docs.codacy.com/release-notes/cloud/cloud-2025-04/ Tue, 01 Apr 2025 00:00:00 GMT CLIv2 adds SARIF output and multi-tool merging; Guardrails integrates with VS Code Agent and Windsurf. • `sarif` is now supported as the standard output format for `cli v2` • `cli v2` can run multiple tools and merge their results into a single SARIF file • `CLIv2` configuration files are placed under `.codacy/` instead of the repository root • `init` command uses `api-token` flag instead of the deprecated `project-token` • Codacy Guardrails is available in the VS Code Copilot Agent extension • Codacy Guardrails is integrated into the Windsurf IDE • Fork and Pull workflows are supported in the Codacy VS Code extension • Ignore reasons on Security findings can be categorized as 'Accepted use' or 'False positive' • Admins can configure resolution deadlines for findings based on severity Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2025-02/ https://docs.codacy.com/release-notes/cloud/cloud-2025-02/ Sat, 01 Feb 2025 00:00:00 GMT Codacy Cloud February 2025 introduces Organization Issues dashboard, Enterprise access, and new Prevented Issues metric. • Adds the new Organization Issues dashboard for high-level visibility across all repositories • Opens the existing Issues dashboard to Enterprise users who previously lacked access • Adds a Prevented Issues metric to the Issues dashboard activity chart Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2025-01/ https://docs.codacy.com/release-notes/cloud/cloud-2025-01/ Wed, 01 Jan 2025 00:00:00 GMT Codacy adds visual goal indicators in repository metrics and revamps SRM findings UI. • `goals` color indicators display on the organization’s repositories list to highlight when metrics exceed or fall short of set targets (ALA-1416). • Repository table now visually differentiates metrics with colors based on whether they meet defined goals (ALA-1402). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2024-12/ https://docs.codacy.com/release-notes/cloud/cloud-2024-12/ Sun, 01 Dec 2024 00:00:00 GMT Codacy Cloud adds SRM dependencies tab and GitHub Enterprise Cloud views for all users • Adds the `SRM dependencies` tab to view dependency lists, distribution across repositories, versions, and associated security findings. • Enables `GitHub Enterprise Cloud` views for all users (no longer restricted to enterprise-only section). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2024-11/ https://docs.codacy.com/release-notes/cloud/cloud-2024-11/ Fri, 01 Nov 2024 00:00:00 GMT Codacy Cloud Nov 2024 adds SRM findings count visibility and custom capital-letter file extension support. • SRM Findings Count: see total SRM findings without filters • Support for Custom Extensions: support file extensions with capital letters Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2024-10/ https://docs.codacy.com/release-notes/cloud/cloud-2024-10/ Tue, 01 Oct 2024 00:00:00 GMT Codacy Cloud adds cross-search for coding standards, pattern status filtering, security finding management, and duplicate standards. • The `Status` filter in Code Patterns now displays a count for each option to show match quantities. • Expanded filtering options in Coding Standards support search term, recommended status, and other criteria. • Coding standards can be duplicated directly from the interface for quicker setup. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2024-09-adding-eslint9-and-pmd7/ https://docs.codacy.com/release-notes/cloud/cloud-2024-09-adding-eslint9-and-pmd7/ Sun, 01 Sep 2024 00:00:00 GMT Codacy adds ESLint 9 and PMD 7 as supported analysis tools • Adds support for ESLint 9 code analysis engine • Adds support for PMD 7 static analysis engine Breaking changes: • ESLint 8 and PMD 6 are deprecated; updates will stop • ESLint 7 is deleted and no longer available • ESLint 9 requires eslint.config.js, eslint.config.mjs, or eslint.config.cjs configuration files instead of .eslintrc.* formats Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2024-09/ https://docs.codacy.com/release-notes/cloud/cloud-2024-09/ Sun, 01 Sep 2024 00:00:00 GMT Codacy Cloud September 2024 adds Rust, CoffeeScript and more to Jscpd; new SRM widgets and coverage UI overhaul. • Jscpd supports new languages: Rust, CoffeeScript, Objective C, Elixir, Groovy, and VisualBasic • Revamped coverage with a new repository page for coverage and new insights • Issue card now shows the source of configuration requiring a pattern next to the code pattern • Warning displayed when conflicts between parameters in the same enforced pattern are found across multiple coding standards • Tooltip on enforced tools and patterns showing names of Coding Standards that require them • SRM findings list now sorted by first detected • Open findings of the current week added to the first widget of SRM overview page Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2024-08/ https://docs.codacy.com/release-notes/cloud/cloud-2024-08/ Thu, 01 Aug 2024 00:00:00 GMT Codacy Cloud August 2024 adds PL/SQL rule support, multi-standard repos, pattern grouping, and more. • Adds Semgrep support for PL/SQL rules from Checkmarx. • Radon now calculates the average complexity of each file in reports. • Status checks protection rule values are now visible everywhere in the UI. • Supports applying multiple coding standards to a single repository. • Issues on the Issues page are now grouped by patterns. • Supports poetry.lock files for dependency checks via Trivy. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2024-07/ https://docs.codacy.com/release-notes/cloud/cloud-2024-07/ Mon, 01 Jul 2024 00:00:00 GMT Codacy Cloud July 2024 adds DAST finding upload and Quality Issues grouping. • Adds the ability to upload Dynamic Application Security Testing (DAST) findings which appear in the Security and Risk Management dashboard • Groups Quality Issues detected in a repository by code pattern on the Quality Issues page for quick filtering Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/self-hosted/self-hosted-v14.0.0/ https://docs.codacy.com/release-notes/self-hosted/self-hosted-v14.0.0/ Wed, 26 Jun 2024 00:00:00 GMT Codacy Self-hosted v14 adds Kubernetes 1.27 support and ESLint file extension coverage. • Adds support for Kubernetes 1.27 in the platform. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2024-06/ https://docs.codacy.com/release-notes/cloud/cloud-2024-06/ Sat, 01 Jun 2024 00:00:00 GMT Codacy Cloud June 2024 adds findings filtering by scan type and `include_paths` config field. • Adds filtering Security and Risk Management findings by scan type to see results based on the detection method • Adds automatic expiration timeouts for every session for increased security • Adds the `include_paths` field to `.codacy.yml` to explicitly specify files or directories to include in the analysis • Adds duplicated code detection support for CoffeeScript, Elixir, Groovy, Objective C, Rust, and Visual Basic Breaking changes: • Codacy stopped sending status checks from the old Coverage engine on June 5th. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2024-05/ https://docs.codacy.com/release-notes/cloud/cloud-2024-05/ Wed, 01 May 2024 00:00:00 GMT Codacy Cloud May 2024 adds Dart duplication analysis, Trivy Java scanning, and .rubocop-codacy.yml support. • Added dependency vulnerability scanning support for Java via `Trivy` • Added support for an alternative RuboCop configuration file for Codacy analysis, `.rubocop-codacy.yml` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2024-04/ https://docs.codacy.com/release-notes/cloud/cloud-2024-04/ Mon, 01 Apr 2024 00:00:00 GMT Codacy Cloud April 2024 adds reanalyzeCoverage API endpoint and allows repo admins to bypass PR status checks. • Adds `reanalyzeCoverage` API endpoint to manually trigger pull request coverage reanalysis • Repository admins can now bypass the Codacy status check to unblock a pull request merge Breaking changes: • Removed ability to create GitHub or Bitbucket issues and PR comments from the Issues tab • All references to 'security items' are now 'security findings' Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2024-03/ https://docs.codacy.com/release-notes/cloud/cloud-2024-03/ Fri, 01 Mar 2024 00:00:00 GMT Codacy Cloud March 2024 adds pen testing results display, repo unfollow, streamlined org setup, and billing changes. • Display penetration testing results directly in the Codacy app UI • Unfollow repositories via a new option in the Codacy app interface • Streamlined organization setup with guided path and Organization overview checklist • Billing calculation change: seats now based only on code analysis activity for auto-managed Enterprise orgs Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2024-02/ https://docs.codacy.com/release-notes/cloud/cloud-2024-02/ Thu, 01 Feb 2024 00:00:00 GMT Codacy Cloud Feb 2024 adds Checkstyle filters, stabilizes new Coverage engine, and opens Organization overview to all plans. • Adds support for the `SuppressionCommentFilter`, `SuppressWarningsHolder`, and `SuppressWarningsFilter` Checkstyle filters. • Stabilizes the new Coverage engine, moving coverage data from beta to stable while marking the old engine deprecated. • Updates the Coverage Pull Requests page to pull data exclusively from the new Coverage engine. • Makes the Organization overview feature available on all plans. Breaking changes: • The option to manually refresh the list of organizations when adding new organizations to Codacy is removed. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2024-01/ https://docs.codacy.com/release-notes/cloud/cloud-2024-01/ Mon, 01 Jan 2024 00:00:00 GMT Codacy Cloud Jan 2024 adds security category filtering and switches to installation access tokens. • Adds ability to filter security and risk items by security category in the UI • Switches repository integration method from deprecated SSH keys to installation access tokens Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy https://docs.codacy.com/release-notes/cloud/cloud-2023-12/ https://docs.codacy.com/release-notes/cloud/cloud-2023-12/ Fri, 01 Dec 2023 00:00:00 GMT Codacy Cloud Dec 2023 opens Security and risk management to all members and rolls out a new Coverage engine. • The `Security and risk management` feature is now available to all organization members, showing repository information for repos they follow. • GitHub coverage summaries and the Codacy app UI diff tabs now pull data from the new `Coverage` engine. Breaking changes: • The Codacy GitHub App requires updated permissions; organization owners must approve these for the feature to work correctly. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codacy