CodeQL
Tag209 stories
CodeQL is GitHub's semantic code analysis engine and query language for finding vulnerabilities in source code. Readers can learn about writing queries, running scans in Actions, the standard query packs, triaging results, and supported languages and limits.
CodeQL zero to hero part 3: Security research with CodeQLLink Underline Setting now GAPush rules public betaGitHub Native IP Allow List expands to EMU User Namespaces – Private BetaCodeQL 2.17.0: Support for Java 22, Swift 5.10, TS 5.4, C# 12GitHub-hosted runner images deprecation notice: Docker Compose v1CodeQL threat model settings are now available for C# (beta)Lightspeed is now a GitHub secret scanning partnerWorkOS is now a GitHub secret scanning partnerCodeQL can scan Java projects without a build