Try our new research platform with insights from 80,000+ expert users

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

GitHub Code Scanning identifies vulnerabilities by analyzing how ports communicate with applications.
The static code analysis capability in GitHub Code Scanning is a powerful feature for identifying vulnerabilities and ensuring code quality.
GitHub Code Spaces offers significant value due to its simplicity and ease of use.
GitHub Code Scanning is scalable, easy to handle, and intuitive.
GitHub Code Scanning positively impacts organizations by recognizing errors and preventing issues from arising.

CONS

GitHub Code Scanning should add more templates.
An AI system to digest reports and provide summaries could be beneficial as reports are often extensive.
Details like outdated libraries might be overlooked in reports and need better highlighting for attention.
Integrating real-time vulnerability highlights during PR checks would improve the process.
Some intuitive highlights require additional code coverage, becoming an annoying overhead.
 

GitHub Code Scanning Pros review quotes

SD
Jul 8, 2025
GitHub Code Scanning has positively impacted my organization as it helps us recognize errors and avoid many later issues which may arise.
AK
May 20, 2025
It's very scalable, very easy to handle, and very intuitive.
reviewer2674647 - PeerSpot reviewer
Mar 13, 2025
GitHub Code Spaces brings significant value with its simplicity and ease of use.
Learn what your peers think about GitHub Code Scanning. Get advice and tips from experienced pros sharing their opinions. Updated: July 2025.
861,524 professionals have used our research since 2012.
SS
Apr 24, 2025
The static code analysis capability in GitHub Code Scanning is a very powerful feature, providing the ability to identify vulnerabilities and ensure code quality.
VishalSingh - PeerSpot reviewer
May 28, 2024
The solution helps identify vulnerabilities by understanding how ports communicate with applications running on a system. Ports are like house numbers; to visit someone's house, you must know their number. Similarly, ports are used to communicate with applications. For example, if you want to use an HTTP web server, you must use port 80. It is the port on which the web application or your server listens for incoming requests.
AG
Nov 23, 2023
We use GitHub Code Scanning mostly for source code management.
 

GitHub Code Scanning Cons review quotes

AK
May 20, 2025
At times it becomes very annoying as it highlights certain things which are intuitive. They require code coverage for those aspects as an extra overhead.
reviewer2674647 - PeerSpot reviewer
Mar 13, 2025
One area for improvement could be the ability to have an AI system digest the reports generated from code scanning and provide a summary. Currently, the reports can be extensive, and users may overlook details, such as outdated libraries, which could be highlighted for attention.
SS
Apr 24, 2025
When running code scans, GitHub Code Scanning provides recommendations for probable fixes. However, integrating a feature where developers receive real-time highlights of vulnerabilities when checking in or merging a PR would be beneficial.
Learn what your peers think about GitHub Code Scanning. Get advice and tips from experienced pros sharing their opinions. Updated: July 2025.
861,524 professionals have used our research since 2012.
AG
Nov 23, 2023
GitHub Code Scanning should add more templates.