Black Duck Coverity vs Gitar
| Black Duck Coverity | Gitar | |
|---|---|---|
| Free plan | Yes | |
| Free trial | Yes | |
| Paid from | $20/mo | |
| Platforms | Linux, macOS, self-hosted, Web, Windows | api, self-hosted, Web |
| IDE support | Yes | Yes |
| CI/CD support | Yes | Yes |
| Free plan | No | Yes |
| Analysis targets | source code | |
| Pull request scans | Yes | |
| CI/CD integration | Yes | |
| Custom security rules | Yes | |
| Automated fixes | Yes | |
| Analysis target | source | |
| Deployment | self-hosted | cloud_only |
| Fix guidance | Yes | |
| Language support | Ansible, Azure Resource Manager, C, C++, CloudFormation, C#, CSS, Docker, Flex, Go, HTML, Java, JavaScript, Kotlin, Kubernetes, Objective-C, PHP, PL/SQL, Python, RPG, Ruby, Rust, Scala, Swift, Terraform, TypeScript, T-SQL, VB.NET, VB6, XML, JSON, YAML, Groovy; Enterprise also adds ABAP, COBOL, JCL, PL/I, and Apex | |
| Security analysis | Yes | |
| Custom rules | No | |
| Paid from | 20 /user/mo | |
| Quality gates | Yes | |
| Technical debt tracking | Yes | |
| Remediation workflows | Yes | |
| Deployment model | cloud | |
| Pull request analysis | Yes | |
| Supported languages | ABAP, Ansible, Apex, Azure Resource Manager, C, C++, CloudFormation, COBOL, C#, CSS, Dart, Docker, Flex, Go, Gosu, Groovy, HTML, Java, JavaScript, JCL, JSON, Kotlin, Kubernetes/Helm, Objective-C, PHP, PL/I, PL/SQL, PowerShell, Python, RPG, Ruby, Rust, Scala, Shell, Swift, Terraform, TypeScript, T-SQL, VB.NET, VB6 | |
| Code hosts | GitHub, GitLab, Bitbucket, Azure DevOps | |
| Automated analysis | Yes | |
| AI review | Yes | |
| Custom review rules | Yes | |
| Review analytics | Yes |
Listed together in Best Static Analysis Tools