GitHub has moved Code Quality from preview to general availability, giving development teams an automated way to catch maintainability and reliability problems before code merges. The tool is live on GitHub Enterprise Cloud and GitHub Team — but not, at launch, on the self-hosted Enterprise Server.

Deterministic meets AI

Code Quality pairs CodeQL, GitHub's deterministic static-analysis engine, with AI-assisted detection to surface issues directly in pull requests. The combination is the pitch: rule-based analysis for precision, plus AI to flag the fuzzier maintainability and reliability problems that deterministic rules miss — reviewed at the moment code is proposed rather than after it ships.

What ships with it

The GA release includes organization-wide dashboards, code-coverage reporting from Cobertura XML surfaced on pull requests, quality gates enforced through GitHub rulesets with coverage thresholds, REST APIs for enabling repositories and retrieving findings, and Copilot Autofix suggestions — the last available without a separate Copilot subscription.

The price

Code Quality costs $10 per active committer per month — counting developers active within the last 90 days and excluding bots — plus usage-based billing for the AI-powered detection and Autofix, and for the Actions compute that runs CodeQL scans. It is not a flat fee; heavy AI use adds to the bill.

The evidence GitHub offers

To make the case, GitHub cites its own dogfooding: in GitHub's engineering organization, it says, teams resolve 67.3% of Code Quality findings before merging pull requests. That is an internal result rather than a general customer benchmark, but it points at the intended workflow — catching problems at review time, when they are cheapest to fix, instead of in production.