Try our new research platform with insights from 80,000+ expert users

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the category report

Prominent pros & cons

PROS

GitHub Code Scanning helps identify vulnerabilities by understanding how ports communicate with applications running on a system.
Ports act as identifiers, enabling communication with specific applications, like using port 80 for an HTTP web server.
GitHub Code Spaces enhances value with simplicity and ease of use.
The static code analysis capability in GitHub Code Scanning is powerful for identifying vulnerabilities and ensuring code quality.
It is scalable, easy to handle, and intuitive.

CONS

GitHub Code Scanning should add more templates for better coverage.
The current reports generated from code scanning are extensive, and an AI system to summarize them would be beneficial.
More details such as outdated libraries should be highlighted for attention.
Developers would benefit from receiving real-time vulnerability highlights when checking in or merging a PR.
Highlighting intuitive aspects without code coverage becomes an annoying overhead.
 

GitHub Code Scanning Pros review quotes

AK
May 20, 2025
It's very scalable, very easy to handle, and very intuitive.
reviewer2674647 - PeerSpot reviewer
Mar 13, 2025
GitHub Code Spaces brings significant value with its simplicity and ease of use.
SS
Apr 24, 2025
The static code analysis capability in GitHub Code Scanning is a very powerful feature, providing the ability to identify vulnerabilities and ensure code quality.
Find out what your peers are saying about GitHub, Sonar, Black Duck and others in Static Application Security Testing (SAST). Updated: June 2025.
856,873 professionals have used our research since 2012.
VishalSingh - PeerSpot reviewer
May 28, 2024
The solution helps identify vulnerabilities by understanding how ports communicate with applications running on a system. Ports are like house numbers; to visit someone's house, you must know their number. Similarly, ports are used to communicate with applications. For example, if you want to use an HTTP web server, you must use port 80. It is the port on which the web application or your server listens for incoming requests.
AG
Nov 23, 2023
We use GitHub Code Scanning mostly for source code management.
 

GitHub Code Scanning Cons review quotes

AK
May 20, 2025
At times it becomes very annoying as it highlights certain things which are intuitive. They require code coverage for those aspects as an extra overhead.
reviewer2674647 - PeerSpot reviewer
Mar 13, 2025
One area for improvement could be the ability to have an AI system digest the reports generated from code scanning and provide a summary. Currently, the reports can be extensive, and users may overlook details, such as outdated libraries, which could be highlighted for attention.
SS
Apr 24, 2025
When running code scans, GitHub Code Scanning provides recommendations for probable fixes. However, integrating a feature where developers receive real-time highlights of vulnerabilities when checking in or merging a PR would be beneficial.
Find out what your peers are saying about GitHub, Sonar, Black Duck and others in Static Application Security Testing (SAST). Updated: June 2025.
856,873 professionals have used our research since 2012.
AG
Nov 23, 2023
GitHub Code Scanning should add more templates.