What is Local CLI / Pre-Commit?

A CLI closes the feedback loop from minutes to seconds and makes the tool scriptable, useful for pre-commit hooks, custom pipelines and debugging why CI disagrees with your machine.

It also matters for confidentiality: a CLI that analyses fully locally never sends source code anywhere, which is sometimes the only way a tool passes review in a regulated environment.

Top 20 Local CLI / Pre-Commit tools

Every tool in the directory documented as supporting Local CLI / Pre-Commit, 16 fully, 4 partially, with what its own documentation says.

Support is not the same as parity, since some implementations are narrower in scope, gated to a higher plan tier, or maintained only for existing customers. The note under each tool is what its own documentation describes.

1. 1
   CodacyQuality Platform

   Codacy Analysis CLI runs static analysis fully locally, no API round-trip; pre-commit hook not confirmed.

2. 2
   ChatGPT / CodexAgent Coding ToolPro/business/enterprise/edu (not plus)

   codex-security install-hook adds a pre-commit scan blocking high-severity findings.

3. 3
   Checkmarx OneCode Security Platform

   Checkmarx One CLI ('cx') plus VS Code extension pre-commit scans; SCA Resolver runs resolution on-prem.

4. 4
   Claude CodeAgent Coding Tool

   /code-review and /security-review run in the terminal; /claude-security local scan needs a paid plan.

5. 5
   CodeAnt AIPR Review

   CLI for local and CI review, with git hooks support for pre-commit scanning

6. 6
   CodeRabbitPR Review

   cr CLI reviews committed, staged, unstaged and untracked local changes; 3 reviews/hour on Free

7. 7
   CodeSceneQuality PlatformStandard

   CLI runs local analysis, goal supervision and batch analysis with script-friendly output

8. 8
   CorgeaCode Security Platform

   corgea setup-hooks; offline deps commands need no network

9. 9
   Cursor (Bugbot)PR ReviewPro

   /review-bugbot reviews branch or uncommitted changes pre-push; patch-ID dedup skips the later PR review.

10. 10
    GitHub Advanced SecurityCode Security PlatformFree on public repos; add-on: Code Security for private/internal

    CodeQL CLI creates and analyses databases locally or in any CI; push protection blocks at push time

11. 11
    GreptilePR Review

    greptile review runs full-fidelity local branch review in ~60s; exit codes usable in hooks

12. 12
    QltyQuality PlatformFree (CLI)

    Open-source CLI runs qlty check and qlty fmt locally, wired as pre-commit and pre-push git hooks

13. 13
    SemgrepCode Security Platform

    `semgrep scan`/`semgrep ci` CLI plus a pre-commit framework hook; org-wide hook settings need Platform.

14. 14
    SnykCode Security Platform

    Snyk CLI runs local pre-commit and CI/CD scans across code, deps, container, IaC, secrets.

15. 15
    SonarQubeQuality Platform

    SonarQube CLI analyses local changes and staged files and runs 'sonar analyze secrets'.

16. 16
    VeracodeCode Security Platformadd-on

    Veracode CLI and Pipeline Scan JAR/Docker run locally; --allow-dirty re-verifies uncommitted changes

17. 17
    AikidoCode Security PlatformPartial

    Offline local SAST scanning possible; no CLI or pre-commit hook documented

18. 18
    DeepSourceQuality PlatformPartial

    CLI queries results and uploads coverage; analysis runs on DeepSource infrastructure, no local pre-commit scan documented.

19. 19
    Gemini Code AssistAgent Coding ToolPartialStandard

    Gemini CLI runs agentic tasks in the terminal; no pre-commit hook or local review command documented.

20. 20
    QodoPR ReviewPartial

    Pre-PR review of uncommitted changes runs in the IDE plugin; no standalone CLI documented

What to look for

• Whether analysis is genuinely local or a thin client for a cloud API
• Parity between CLI results and server results
• Pre-commit framework integration
• Whether the CLI is available on the free tier

Related terms

FAQ