CodeDigPR risk analysis before merge
CodeDig focuses review attention where it matters: blast radius, risky changes, test gaps, and security-relevant findings before a pull request is approved.
PR Risk Analysis
Every pull request is automatically scored for risk so your team can focus review effort where it matters most. CodeDig evaluates blast radius, complexity delta, and coverage signals to surface the PRs that deserve extra scrutiny.
- Composite risk score combining size, complexity, coverage, and drift signals
- Blast-radius mapping shows which files and callers a change affects
- Test coverage delta tracking shows whether each PR raises or lowers coverage
- Complexity trend tracking shows how files and modules change over time
Security Scanning
Catch vulnerabilities before they reach production. CodeDig runs 140+ security rules against every code change, covering OWASP Top 10 categories and language-specific pitfalls. Findings appear inline on the PR with severity ratings and remediation guidance.
- PII exposure detection across logs, API responses, and database queries
- SQL injection and NoSQL injection pattern matching
- Hardcoded secrets, API keys, and credential scanning
- OWASP Top 10 coverage with language-aware rule sets
Architectural Intelligence
Understand how your codebase evolves over time. CodeDig builds a living model of your architecture and alerts you when changes drift from established patterns, introducing unwanted coupling or violating module boundaries.
- Architectural drift detection flags boundary violations in real time
- Dependency graph analysis reveals hidden coupling between modules
- Architectural drift trend shows how your architecture score evolves over time
- Module boundary enforcement based on your declared architecture rules
Test Gap Analysis
Go beyond line-level coverage numbers. CodeDig reports the coverage delta on every PR so reviewers can see whether the change raises or lowers coverage, and where to prioritize test writing.
- Coverage delta reported on every PR — see whether the change helps or hurts coverage
- Least-covered symbols ranked repo-wide, so you can target the biggest gaps first
- Coverage complexity scoring ranks untested areas by implementation weight
- Historical coverage runs per repo so you can compare coverage over time
Dead Code Detection
Eliminate maintenance burden by identifying code that is no longer reachable. CodeDig performs cross-file, cross-module analysis to find unused exports and unreachable functions that can be safely removed.
- Unused export and function detection across the entire repository
- Orphaned symbol identification for functions with no remaining callers
- Safe-removal confidence scores so you can clean up with certainty
- PR-level dead code alerts when changes create newly unreachable code
Multi-Language Support
One tool for your whole stack. CodeDig provides deep, language-aware analysis for the most popular backend and frontend languages, with the same rich insights regardless of which language a PR touches.
- First-class support for C#, TypeScript, Rust, Python, Java, and Go
- Language-specific security rules tuned to each ecosystem
- Cross-language dependency tracking in polyglot repositories
- Unified dashboard view across all languages in your organization
Compliance & Audit
Support governed engineering workflows without turning PR review into paperwork. CodeDig helps teams retain risk signals, review decisions, and findings that can support internal audit conversations.
- Automated audit trail for every PR review and approval
- Security and review evidence that can support internal control mapping
- Policy-as-code enforcement for organizational coding standards
- Exportable review summaries for engineering and security stakeholders
GitHub Integration
Get started in under 60 seconds. CodeDig installs as a GitHub App with a single click and requires zero configuration files or CI pipeline changes. Analysis results appear as inline comments directly on your pull requests.
- 1-click GitHub App install with no config files or CI changes
- Inline PR comments with risk scores, findings, and remediation tips
- Status checks that gate merges on security and quality thresholds
- Organization-wide rollout with per-repo configuration overrides
Ready to ship with confidence?
Start analyzing your pull requests in under 60 seconds. No credit card required.