ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
Security & identity · #qodana
Learn how to run Qodana in a Docker container, configure severity thresholds in .qodana.yml, generate SARIF reports, and automatically fail CI jobs when critical issues appear.
Capture a one‑time Qodana baseline to silence legacy noise, then fail CI only on new issues. Learn the exact Docker commands, CI snippet, and safe baseline‑update workflow.
Qodana’s baseline feature lets you suppress known issues in CI pipelines. This guide walks through diagnosing missing or stale baselines, generating and validating them, and when to ask for help.
Qodana is a container‑based static‑analysis engine that runs JetBrains inspections inside Docker. This guide details the minimal architecture, data boundaries, operational checks, and failure modes to keep CI pipelines reliable and source‑safe.
Learn how to set up Qodana’s baseline feature so that only new code issues break your build, with a step‑by‑step guide, verification tips and recovery options.
Use Qodana baselines to suppress existing violations and fail CI only on new issues. Worked qodana.yaml config, baseline generation commands, GitHub Actions integration, and common pitfalls like line-sensitivity and inspection-ID drift.
Qodana lets you run JetBrains IDE inspections inside CI pipelines with Docker. Learn how to set up a baseline, export SARIF for PR annotations, and manage memory limits in a practical GitHub Actions example.
Learn how to run IntelliJ IDEA’s full inspection suite in CI/CD with Qodana, configure custom profiles, and generate SARIF reports for automated quality gates.
Decide whether to run Qodana in Docker or install it locally. Compare isolation, speed, and version control, then see a GitHub Actions workflow that pulls the image, runs the scan, and uploads the HTML report.
docker