Codacy | Blog - Automate your code quality

A Global CX Software Company Closed 1,200 Security Issues with 90% Accuracy Using Codacy

Codacy — Tue, 14 Jul 2026 11:04:55 GMT

This customer operates in a security-sensitive environment and has requested anonymity; all figures and quotes are as provided.

The company scales application security across 900+ repositories and 1,400 developers while significantly reducing false positives and accelerating remediation times. We spoke with its Manager of Security Operations, who leads vulnerability management, and its Senior Security Engineer, who owns SAST, DAST, and vulnerability scanning.

Why this Fintech Chose Codacy Over SonarQube, Semgrep, and GitHub Advanced Security

Codacy — Tue, 14 Jul 2026 10:29:52 GMT

Given the compliance-sensitive nature of financial services, this customer chose to share their story anonymously.

Learn how this fintech platform serving 70+ global financial institutions chose Codacy to move security from a periodic gate into a continuous habit for 150 engineers. We spoke with the company's Senior Director of Engineering about why point-in-time audits weren't enough, and how his team made secure coding part of the daily workflow.

Deterministic Static Analysis for AI Coding Workflows: How to Cut Token Cost Without Weakening Code Review

Codacy — Mon, 13 Jul 2026 13:31:08 GMT

Why Engineering Teams Keep Building In-House AI Code Review Tools, and What It Really Costs

Codacy — Thu, 09 Jul 2026 13:44:00 GMT

LLMs made internal AI code review tools easy to prototype. They did, however, not make them easy to operate.

Agentic Development Is Standardizing Faster Than Its Operating Model

Codacy — Thu, 09 Jul 2026 13:42:53 GMT

Right now, an agent is probably opening pull requests against your production code. You may not be able to say which agent, who configured it, which instruction file shaped its output, or whether it follows the same rules as the team next door.

The problems begin when two teams touch shared code and you realize the rules you assumed everyone followed were local conventions all along.

This is no new pattern. Git and CI/CD created a similar predicament, spreading before teams embraced standardization. Agentic development is running that same cycle, with one difference: the agent doesn't assist the edit loop, but rather acts inside it.

This article is about building the operating model before agentic workflows become load-bearing in production: what it needs to cover, and where the controls have to live.

Repository Instructions Are Becoming Engineering Artifacts. Treat Them Like It.

Codacy — Wed, 08 Jul 2026 12:03:02 GMT

Your team already treats CI config, dependency manifests, and policy files as things that need an owner, a review, and a drift check, because they shape the code you ship. Repository instruction files like CLAUDE.md, AGENTS.md, and .cursorrules now do the same job: coding agents read them to decide how to generate, modify, and review code. But most of them currently sit outside all of it and are edited like notes, owned by no one and reviewed by nobody.

The AI Coding Maturity Scale: The Path to Loop Engineering

Jaime Jorge — Fri, 03 Jul 2026 16:56:27 GMT

Over the last few quarters, we talked to hundreds of software teams about how they're actually using AI coding agents. What surprised me was that most teams are running autocomplete in one repo, agents building whole features in another, and already experimenting with loops against their own infrastructure. Often in parallel, sometimes in the same sprint.

Introducing Codacy Skills (Part 2): Configure your scan rules to cut PR noise

Alejandro Rizzo — Wed, 01 Jul 2026 15:16:46 GMT

A Pull Request check is only worth having if your team trusts it. The moment people learn to wave past the gate and merge anyway, the gate stops doing its job.

Knowledge Bases Will Define the Next Generation of Agentic Coding

Jaime Jorge — Fri, 26 Jun 2026 16:43:11 GMT

I am a big fan of knowledge bases. I’ve been using Obsidian consistently since 2020. Today, this knowledge base has 2,343 notes that I mostly wrote on my own.

Code Review Is Dead: AI-Generated Code Needs Verification, Not Human Approval

Codacy — Wed, 24 Jun 2026 21:46:54 GMT

This is part 2 of our The Future of Code Review series. Read part 1, AI Is Breaking Code Review: How Engineering Teams Survive the PR Bottleneck, here.

The ceremony of pre-merge human approval is breaking. With AI adoption among software development professionals reaching 90%, code is increasingly generated faster than review processes were designed to handle. The gap widens with every new tool adoption.