JetBrains Plugin Adds DeepCode Integration
Written by Nikos Vaggalis   
Tuesday, 23 June 2020

DeepCode, a SAST tool bug finder based on machine learning, can now be used seamlessly from within IntelliJ, PyCharm, and WebStorm.

There's a lot of interest lately on Static Application Security Testing (SAST) Tools, and that has to do with the fact that the software written today is very complex and very large - a simple code review by humans won't cut it anymore. Thus the introduction of SAST tools into the CI/CD pipeline and more specifically at the Commit-time and Test-time check phases.We've recently covered a new hybrid kind of tool of the genre, in "Semgrep - More Than Just a Glorified Grep", which occupies a space somewhere in between grep and a SAST tool - more expressive than grep, but not as hard to tweak and learn as a SAST.

Still there's no IDE integration for SemGrep at this time, unlike DeepCode. Kay Ewbank gave us the lowdown on it in DeepCode Gets Cash And Opens Free Tier:

DeepCode is an AI -based tool that integrates with code hosting platforms including GitHub, Bitbucket Server and GitLab. It can be used to carry out an AI QA audit, analyzing any branch of your repositories to see the analysis results in your browser. You can also carry out a commit analysis that analyzes all your commits and comments on them to see if a commit introduces any new issues. The final option is a pull request analysis that does the same thing for pull requests.

The same report noted:

"The system is based on machine learning and aims to understand the intention of your code".

DeepCode is now easier to use thanks to its integration into JetBrains popular range of IDEs, IntelliJ, PyCharm, and WebStorm. As those IDEs are also associated with specific programming languages, it also indicateds which of these are supported by DeepCode: Java, C/C++, Python, JavaScript and TypeScript. While it also works in CLion, support is experimental.

By installing the extension from the JetBrains marketplace, you get DeepCode's analysis of your code whenever you press Save from within your IDE. This is promised to:

"identify 10x more critical bugs and security vulnerabilities than other tools"

since, as our previous report pointed out, DeepCode's analysis understands the intention of your code through the use of ML.

Installation with usage instructions can be found on its GitHub repo. Now get bug crushing!


More Information

DeepCode on JetBrains Marketplace
DeepCode GitHub repo

Related Articles

DeepCode Gets Cash And Opens Free Tier

Semgrep - More Than Just a Glorified Grep


To be informed about new articles on I Programmer, sign up for our weekly newsletter, subscribe to the RSS feed and follow us on Twitter, Facebook or Linkedin.


CDN Serves Malware - 100,000 Polyfill Users At Risk

Back in the day, before modern JavaScript was all grown up, a lot of us resorted to polyfills to make up for browsers not supporting the very latest features. It looks as if that choice is coming to b [ ... ]

Paul Allen's Living Computer Museum Going, Going, Gone

The Seattle-based Living Computer Museum, founded in 2012 by Paul Allen to preserve vintage and heritage computers for posterity has closed and its collection will be sold at auction by Christies in S [ ... ]

More News

kotlin book



or email your comment to:

Last Updated ( Tuesday, 23 June 2020 )