Get started now
Python

Python Code Quality and Security

  • Detect Bugs

    Bugs

  • Detect Vulnerabilities

    Vulnerabilities

  • Detect Hotspots

    Security Hotspots

  • Detect Code Smells

    Code Smells

Get started now

You get fast, accurate analysis with minimal
configuration, and few false positives.

  • check

    Great experience out of the box

  • check

    Sophisticated rules to find highly valuable issues

  • check

    Open-source, community based

  • check

    Your Python code is more reliable and secure

  • Cognitive Complexity of functions should not be too high

    Cognitive Complexity of functions should not be too high

    • Detect Code Smells Code Smells
  • Related 'if/else if' statements should not have the same condition

    Related 'if/else if' statements should not have the same [...]

    • Detect Bugs Bug
  • Signalling processes is security-sensitive

    Signalling processes is security-sensitive

    • Detect Hotspots Hotspot
  • LDAP queries should not be vulnerable to injection attacks

    LDAP queries should not be vulnerable to injection attacks

    • Detect Vulnerabilities Vulnerability

Empowering Python developers

We believe only developers can truly impact Code Quality and Security.

That’s why we provide the user experience and rule documentation to make sure issues are
easy to understand and learn from, so developers can hone their craft.

Quickly pinpoint the problem

Issues are raised on the exact symbol or
expression that needs work, with secondary
locations highlighting any additional context
needed to understand the problem.

Issues are raised on the exact symbol or expression that needs work
Detailed rule description help you understand the issue and lean from it

Easily understand the issue

Detailed rule descriptions help you
understand the issue and learn from it.


Continuous growth isn’t just for developers!
We’re continuously improving our static
analysis of Python, to better understand
and diagnose your code.

Start writing
better code today

Get started now Free for Python Developers

Personal responsibility, not heroics

Touching one line in a file doesn’t mean you have to fix every old issue in it.

We highlight the Code Quality and Security of your New Code (changed or added) so you can
focus on what’s important: making sure the code you write today is clean and solid. With the
Clean as You Code methodology, no one is responsible for cleaning up someone else’s code.
You only have to do an okay job on the code you’re writing today.

  • SonarSource products are compatible with GitHub

    GitHub

  • SonarSource products are compatible with Bitbucket

    Bitbucket

  • SonarSource products are compatible with GitLab

    GitLab

  • SonarSource products are compatible with Azure DevOps

    Azure DevOps

  • Pull request analysis available in GitHub
  • Pull request analysis available in Bitbucket
  • Pull request analysis available in GitLab
  • Pull request analysis available in Azure DevOps

PR analysis

Pull Request analysis makes it easy to
maintain a high standard. Handle issues at the
PR stage to clean up the easy stuff before
peer review even starts, boosting team
velocity and saving time to focus on what’s
important: the logic.

Get started now

SonarLint

SonarLint in your IDE is your first line of defense for keeping the code you write today
clean and safe. Connect to your project in SonarQube or SonarCloud to make sure you’re
applying the same rules that will be used during analysis

Detect issues in your IDE with SonarLint
Install SonarLint on Intellij SonarLint

SonarLint
For IntelliJ

Install now arrow
Install SonarLint on Eclipse SonarLint

SonarLint
For Eclipse

Install now arrow
Install SonarLint on VS Code SonarLint

SonarLint
For VS Code

Install now arrow

One to rule them all

all the languages in your project, that is


Very few modern projects use just one language.

Your projects are multi-language, so our static analysis is too. That means
you get a consolidated, consistently great experience across the board, no
matter how many of our 27 languages you use.

Java
csharp
c
cplus
javascript
typescript
python
go
swift
cobol
apex
php
See All Languages arrow
×

Where do you want to analyze Python?

In-IDE

IDE extension that lets you fix coding issues before they exist!

Install in
Install SonarLint on Intellij Install SonarLint on Eclipse Install SonarLint on VS Code
Always free

In-Cloud

Setup is effortless and analysis is automatic for Python

Sign up Free for FOSS projects

On-premise

Fast, accurate Code Quality and Code Security analysis for Python

Download Free in Community Edition
Smoothly integrated with GitLab GitHub Bitbucket Azure DevOps
×

Where do you want to analyze Python?

In the Cloud

Setup is effortless and every
Python Pull Request is analyzed
and the results automatically reflected in your cloud-based ALM.

Sign up Free for OS projects

On-premise

Analyze your Python Pull Requests and see the results in the ALM of your choice.

Download PR analysis in commercial editions
Smoothly integrated with GitLab GitHub Bitbucket Azure DevOps

Unique Approach

Products

Plans and pricing

Company

© 2008-, SonarSource S.A, Switzerland. All content is copyright protected. SONARSOURCE, SONARLINT, SONARQUBE and SONARCLOUD are trademarks of SonarSource SA.

All other trademarks and copyrights are the property of their respective owners. All rights are expressly reserved.

Privacy Policy | Terms and Conditions