GitHub Code Quality is now generally available on GitHub Enterprise Cloud and GitHub Team. The service combines CodeQL analysis with AI-assisted detection of maintainability and reliability problems, then uses Copilot Autofix to suggest changes for review in pull requests, according to an announcement from GitHub. Code Quality had been in public preview since October 2025. During that period, more than 10,000 enterprises used the product, according to GitHub. The general availability release adds organisation-wide enablement, dashboards showing maintainability and reliability scores, test coverage metrics, and rulesets for quality gates.
The announcement explains how the product operates at two places in the development process. On a pull request, CodeQL reports quality findings in context and can show whether a change affects test coverage. On the default branch, it identifies existing quality debt across a repository. Teams can use rulesets to enforce coverage or other thresholds, with an evaluate mode intended to allow a gradual rollout.
AI-assisted development tools are increasing the amount of code produced, but the work needed to assess its design and long-term maintainability remains with engineering teams. GitHub says that 67.3 percent of findings raised by Code Quality in its own engineering organisation are resolved before pull requests are merged. GitHub's own results are presented as an early measure rather than a guarantee of quality. Code Quality can identify and prioritise problems, but the decision to accept a suggested fix remains with developers. For organisations using AI to increase code output, the release therefore adds a control layer around maintainability, coverage and reliability, alongside the security checks that CodeQL already provides.
The approach extends GitHub's existing use of CodeQL and Copilot Autofix for security. A recent InfoQ news piece describes how Microsoft is applying the same combination of static analysis and AI-generated remediation to vulnerabilities in Azure Repos. That report also noted that generated fixes still need normal testing and human review because they can be incomplete or introduce unintended effects.
"Code Quality helps teams ship code they trust."
- GitHub
GitHub's service is a separate paid product, not part of GitHub Advanced Security, with a base price of $10 per active committer per month. An active committer is counted once per organisation when they have pushed to an enabled repository in the previous 90 days. AI-assisted detection and Copilot Autofix bring usage-based charges, while deterministic CodeQL scans use GitHub Actions compute. GitHub-hosted and self-hosted runners are supported.
There’s an operational consequence for preview users to this pricing change: existing configurations continue to run under the customer's GitHub agreement, but organisations need to review where Code Quality is enabled if they do not want to incur charges. It is available on GitHub Enterprise Cloud and GitHub Team, but not on GitHub Enterprise Server at launch.
GitLab is taking a similar route through Duo Code Review. Its agent reviews merge requests using repository, pipeline, security and compliance context, and can generate structured inline feedback. In March 2026, GitLab announced a flat price of $0.25 per agentic review, making the cost independent of change size. The feature is available across GitLab.com, Dedicated and supported self-managed installations, according to GitLab.
Atlassian is tying code review more closely to the work-management context around a change. Rovo Dev reviews pull requests in Bitbucket and GitHub, checking quality, security and performance while using Jira acceptance criteria and project context to assess whether an implementation matches the intended work. Atlassian says its internal Rovo Dev Code Reviewer reduced pull request cycle time by 30.8 percent, although that result comes from the company's own engineering environment and is not an independent benchmark. Atlassian's account describes the system and its reported results.
In response to the release of Code Quality, a Reddit discussion focused on access and cost, noting that the charge is based on committers rather than reviewers and that the service is limited to certain GitHub plans. Redditers questioned whether organisation-wide visibility and automated fixes justify another per-user platform charge.