Interpreting the code quality results for your repository

View GitHub Code Quality findings for your default branch and fix them to improve your quality rating.

Wer kann dieses Feature verwenden?

Users with write access

GitHub Code Quality is available for:

  • Public repositories on GitHub.com
  • Organization-owned repositories on GitHub Team or GitHub Enterprise Cloud

In diesem Artikel

Hinweis

GitHub Code Quality is currently in public preview and subject to change. During public preview, Code Quality will not be billed, although Code Quality scans will consume GitHub Actions minutes.

Prerequisites

Viewing the full backlog of code quality results

  1. Navigate to the "Security" tab of your repository.
  2. Click to expand Code quality, then click Standard findings.

Alternatively, if you want to view AI-powered findings for the most recently changed files, see Improving the quality of recently merged code with AI.

Exploring the backlog for your repository

The "Standard findings" dashboard shows all the results found by CodeQL analysis on the default branch of your repository. This view helps you visualize the full backlog of quality results and prioritize work to fix specific types of problems.

The overview, at the top of the page, summarizes the maintainability and reliability of the codebase.

Screenshot of the "Standard findings" dashboard for code quality results. The summary is outlined in dark orange.

Underneath the overview, the full list of results is shown with a header with filters that you can use to focus on a specific set of findings. The results are:

  • Grouped by the rule that detected each finding
  • Within each rule, ordered by file path alphabetically

Explore the results by expanding a rule to list the affected files and clicking on the name of a rule to see full details of the findings.

Screenshot of the Rules table on the "Standard findings" dashboard for code quality. The "Overwritten property" rule name is outlined in dark orange.

Interpreting ratings and metrics

Code quality results should always be interpreted in the context of your repository. For example:

  • Small repositories, or repositories with only a small amount of code written in supported languages, tend to have few results and good ratings.
  • Repositories with a lot of generated code may have many maintenance results, lowering the rating for maintainability. This is not a problem if the source code itself is maintainable.
  • Large repositories with a lot of code in a fully supported language often have many results even if the majority of the code has good maintainability and reliability standards.

Next steps