Compare tools side by side · TechInTrends

Static analysis security scanner built specifically for Ruby on Rails applications.

GitHub's semantic code analysis engine behind code scanning and Copilot Autofix; free for public repos.

Fast, pattern-based multi-language static analysis with community and pro rules; popular in CI.

Code quality and security platform with quality gates on coverage, bugs, smells and vulnerabilities.

Head to head

Metric	Brakeman	CodeQL	Semgrep	SonarQube
Stars	7.3k	10.3k	17.5k	11.2k
Weekly downloads	n/a	n/a	5.6M	n/a
Download growth	n/a	n/a	+29%	n/a
Popularity score	71/100	73/100	80/100	74/100
Forks	779	2.1k	1.2k	2.2k
Open issues	120	1.5k	990	1
Last commit	3w ago	2d ago	6d ago	1d ago
Latest version	n/a	n/a	1.185.0Nov 10, 2026	n/a
License	n/a	MIT	LGPL-2.1	LGPL-3.0
First released	2010	2018	2019	2011
Signals	None	Popular	Popular	Popular
Listed in	Security & Identity › SAST & code scanning	Security & Identity › SAST & code scanning	Security & Identity › SAST & code scanning	Testing & QA › Coverage, Reporting & Test Analytics Security & Identity › SAST & code scanning

Weekly downloads over time

Hover for exact values; switch to log scale for tools of very different sizes. Not shown (no comparable download data): Brakeman, CodeQL, SonarQube.