CodeValor supports multiple programming languages including Ada, Python, JavaScript, TypeScript, C#, GoLang, C/C++, Java, Fortran, Ruby on Rails, and Java Bytecode. It performs static code scanning, correlating findings to Common Weakness Enumerations (CWEs) and Security Technical Implementation Guides (STIGs), and provides automated software vulnerability scanning using machine learning methodologies and dynamic analysis. The tool integrates with CI/CD pipelines via a command-line interface, supports repositories from GitHub, GitLab, and BitBucket, and generates reports in formats such as PDF, HTML, CSV, Excel, and POA&M. CodeValor also enables collaboration features for teams, allowing comments and project assignments, and is containerized for flexible deployment, making it suitable for DevSecOps environments.
