GitHub has officially launched its Code Quality feature for both GitHub Enterprise Cloud and GitHub Team, following a successful public preview that began in October 2025 and attracted over 10,000 enterprise users. This service integrates CodeQL analysis with AI-driven detection to identify issues related to maintainability and reliability, and utilizes Copilot Autofix to propose changes for review in pull requests, as highlighted in GitHub's announcement.
With the rollout of Code Quality, organizations can now access features like organization-wide enablement, dashboards that display maintainability and reliability metrics, insights into test coverage, and customizable rulesets designed for quality control.
The functionality of Code Quality operates in two key areas of the development workflow. For pull requests, it provides quality reports in real-time, indicating how changes may impact test coverage. On the default branch, it helps teams uncover existing quality debts within their repositories. Organizations can also set rulesets to enforce quality standards, and an evaluation mode enables a gradual implementation of these checks.
While AI-assisted tools are enhancing code production, the responsibility for assessing design quality and long-term maintainability still lies with development teams. GitHub reports that 67.3% of the issues identified by Code Quality within their own engineering team were addressed prior to merging pull requests, indicating a positive impact, although it clarifies that these results are initial measures rather than definitive quality assurances. Ultimately, Code Quality can highlight and prioritize potential problems; however, the authority to accept suggested alterations remains with developers. Consequently, for organizations relying on AI to boost code output, this feature provides an important layer of control regarding maintainability and reliability, complementing the security checks already established by CodeQL.
The new offering continues to build on GitHub's use of CodeQL and Copilot Autofix for security purposes. A recent report from InfoQ highlights Microsoft's implementation of static analysis combined with AI-generated solutions for vulnerabilities within Azure Repos. The report emphasizes the necessity for thorough testing and human review of AI-generated fixes, which may not always be comprehensive and can inadvertently introduce new issues.
According to GitHub, "Code Quality helps teams ship code they trust," emphasizing the importance of this service in the development lifecycle.
It’s important to note that Code Quality is offered as a separate paid service and is not bundled with GitHub Advanced Security. The base rate is set at $10 per active committer per month, with an active committer defined as anyone who has pushed to a repository enabled for Code Quality within the prior 90 days. Charges for AI-assisted detection and Copilot Autofix will be based on usage, while deterministic CodeQL scans leverage GitHub Actions compute. Both GitHub-hosted and self-hosted runners are compatible.
As for existing users of the preview, they will continue with their present configurations under their current GitHub agreement, but it is essential for organizations to assess their Code Quality enablement to avoid unexpected charges. While Code Quality is initially available on GitHub Enterprise Cloud and GitHub Team, it will not be accessible on GitHub Enterprise Server at launch.
Meanwhile, GitLab is pursuing a similar path with its Duo Code Review feature, which evaluates merge requests by considering repository, pipeline, security, and compliance factors and provides detailed inline feedback. In March 2026, GitLab announced a flat rate of $0.25 per agentic review, ensuring costs are not affected by the scale of changes, and the service is universally available across GitLab’s platforms.
Atlassian is enhancing the integration of code reviews with the surrounding work-management context through its Rovo Dev tool, which evaluates pull requests in both Bitbucket and GitHub for quality, security, and performance while aligning with Jira’s acceptance criteria and project details. According to Atlassian, their internal Rovo Dev Code Reviewer has cut pull request cycle time by 30.8%, though this statistic is based on their internal engineering data and not independently verified.
In light of Code Quality's launch, discussions on Reddit have touched on aspects of access and pricing, pointing out that the charges apply to committers rather than reviewers and that availability is limited to specific GitHub plans. Some users expressed skepticism about whether the benefits of organization-wide visibility and automated fixes justify an additional per-user fee for the platform.
