GitHub Code Quality becomes generally available for Enterprise Cloud and Team

GitHub has moved Code Quality to general availability, turning a preview program for pull request analysis into a paid product for GitHub Enterprise Cloud and GitHub Team customers. The July 20 launch is aimed at teams trying to keep maintainability and reliability standards steady as AI-assisted coding increases the volume of changes flowing through repositories.

The service combines deterministic CodeQL analysis with AI-assisted detection. In practice, GitHub says it can flag maintainability and reliability issues inside pull requests, while Copilot Autofix can suggest changes for maintainers to review before code is merged. That makes the product less of a post-release auditing tool and more of a gate inside the day-to-day development workflow.

What changed at launch

GitHub says the general availability release includes organization-wide enablement, dashboards that summarize quality scores across repositories, quality gates through repository rulesets, and pull request code coverage metrics based on Cobertura XML test reports. APIs are also available for repository enablement and for fetching findings, which matters for larger engineering organizations that want reporting or policy enforcement outside the GitHub interface.

The pricing model is now explicit. Code Quality is sold separately from GitHub Advanced Security, not bundled into it, and it is not available on GitHub Enterprise Server at launch. GitHub lists a base price of $10 per active committer per month, where an active committer is someone who has pushed to a repository with Code Quality enabled in the previous 90 days. Bot accounts are excluded from that base charge. AI-powered work, including AI-assisted detection and Copilot Autofix, is billed by usage, and CodeQL analysis also requires compute through GitHub Actions runners.

For organizations that tested the preview, GitHub says there is no migration step. More than 10,000 enterprises used Code Quality during the preview, and the service keeps running under existing GitHub agreements. The operational change is financial: billing begins with general availability, so customers that enabled broad scans during preview now need to review repository and organization settings if they want to avoid continuing charges.

The launch also shows how GitHub is packaging AI-era developer tooling. Instead of treating AI coding assistance and application security as separate tracks, Code Quality puts static analysis, coverage signals, rulesets, and AI-suggested remediation into the pull request path where teams already make merge decisions.

Sources

• github.blog
• docs.github.com

Cover photo by Daniil Komov on Pexels, used under the Pexels License.