compare
CodeChecker vs Semgrep
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | CodeChecker | Semgrep |
|---|---|---|
| Language | Python | C |
| Licence | Apache-2.0 | LGPL-2.1 |
| Stars | 2.6k | 17k |
| Latest | v6.29.1 | v1.179.0 |
| Last push | 2026-10-03 | 2026-10-06 |
| Release cadence | about 15 days between releases | about 9 days between releases |
| Active contributors | 20 commit authors on the default branch in the last 90 days | 26 commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace SonarQube Cloud. Alternatives to SonarQube Cloud →
PartialCodeCheckerStores, compares and triages the results of Clang, GCC and other analyzers on a server you run, mainly for C and C++.
PartialSemgrepRule-based scans of many languages from the CLI or in CI, with no server keeping findings across branches.
CodeChecker
- v6.29.12026-09-17
- v6.29.02026-09-081. The gcc static analayzer checkers are renamed from gcc-<checker_name> to gcc-analyzer-<checker_name> e.g.
- v6.28.32026-08-25Fix removeToken query filtering
- v6.28.22026-06-25This is a bug fix release fixing mainly WEB GUI issues.
- v6.28.12026-06-10Renaming functionality for Filter-presets #4861
CodeChecker
unsigned The latest release, v6.29.1, carries no signature GitHub could verify.
Loading the security report
Semgrep
unsigned The latest release, v1.179.0, carries no signature GitHub could verify.
Loading the security report