jetbrains/Qodana Scan

Scan your projects with Qodana on GitHub. Docs: https://jb.gg/qodana-github-action

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Jul 10, 2026
License
Apache 2.0

Pinned Snippet

workflow.ymlSHA-pinned
uses: jetbrains/qodana-action@4861e015da555e86a72b862892aba6c2b93e6891 # v2026.1.3

tags can be moved; commit SHAs can't. why a SHA?

Inputs

namedescriptionrequireddefault
argsAdditional Qodana CLI arguments, e.g. "--log-level debug --property key=value". Quote arguments containing spaces. Comma-separated format is deprecated.no""
results-dirDirectory to store the analysis resultsno${{ runner.temp }}/qodana/results
cache-dirDirectory to store Qodana cachesno${{ runner.temp }}/qodana/caches
use-cachesAutomatically restore and save Qodana caches using GitHub cachesnotrue
primary-cache-keySet the primary cache keynoqodana-2026.1-${{ github.ref }}-${{ github.sha }}
additional-cache-keySet the additional cache keynoqodana-2026.1-${{ github.ref }}
cache-default-branch-onlyUpload cache for the default branch onlynofalse
upload-resultUpload Qodana results (SARIF, other artifacts, logs) as an artifact to the jobnofalse
artifact-nameSpecify Qodana results artifact name, used for results uploadingnoqodana-report
use-annotationsUse annotations to mark the results in the GitHub user interfacenotrue
pr-modeAnalyze ONLY changed files in a pull requestnotrue
post-pr-commentPost a comment with the Qodana results summary to the pull requestnotrue
github-tokenGitHub token to access the repository: post annotations, commentsno${{ github.token }}
push-fixesPush Qodana fixes to the repository, can be none, branch to the current branch, or a pull requestnonone
commit-messageCommit message for the commit with quick-fixes. Not used if `push-fixes` is set to `none`no🤖 Apply quick-fixes by Qodana
nightly-versionQodana CLI nightly version to use (e.g. 2026.2 or latest). Downloads CLI from tag v{version}-nightly.no""

Outputs

no outputs