DeepSource is a code health and security platform that identifies and fixes issues and vulnerabilities in codebases.
Field note
DeepSource provides automated code analysis to detect code health issues and security vulnerabilities. It offers Autofix for automated remediation, vulnerability details with severity metrics, and reachability analysis to prioritize fixes.
Capabilities
Tags
Ways to use it
Not filed / Not filed
Not filed / Not filed
Product features
Configure analyzers to fine-tune how DeepSource reviews your code.
Automatically formats code on every pull request and adds a commit with changes.
Automated remediation engine that generates fixes for issues and vulnerabilities.
Enable code formatters to auto-format pull requests.
Automated code review on pull requests with comments and dashboard reports.
Track code coverage to see which parts of your code are tested.
Custom metric combining CVSS, EPSS, and reachability to prioritize vulnerabilities.
Enable and configure code formatters like Black, Prettier, and gofmt from settings.
Enforce open-source license policies across your team.
Option to manually fix issues by editing code and pushing commits.
Automatically analyzes every pull-request and new commits.
Provides call graphs showing if vulnerable code is called by your application.
Scan for vulnerabilities in dependencies.
Comprehensive information including CVE, affected package, severity metrics, and EPSS score.