GitHub Code Quality, combining CodeQL and AI, is now generally available

General Availability of GitHub Code Quality

GitHub Code Quality has reached general availability on GitHub Enterprise Cloud and GitHub Team. This service integrates CodeQL analysis with AI-assisted detection to identify maintainability and reliability problems in codebases. It also uses Copilot Autofix to suggest potential changes directly within pull requests for developer review.

New Features and Operational Scope

The general availability release introduces organization-wide enablement, dashboards displaying maintainability and reliability scores, test coverage metrics, and rulesets for quality gates. The product operates at two key points in the development workflow: reporting quality findings and test coverage impact on pull requests, and identifying existing quality debt across a repository's default branch. Rulesets can enforce thresholds, with an evaluate mode for gradual rollout.

Addressing AI-Generated Code Challenges

With the increasing volume of code produced by AI-assisted development tools, the responsibility for assessing design and long-term maintainability remains with engineering teams. GitHub states that 67.3 percent of findings identified by Code Quality within its own engineering organization are resolved before pull requests are merged. This service aims to provide a control layer for maintainability, coverage, and reliability, complementing the existing security checks offered by CodeQL.

Pricing and Context

GitHub Code Quality is a separate paid product, distinct from GitHub Advanced Security. It is priced at $10 per active committer per month. An active committer is counted once per organization if they have pushed to an enabled repository.