codeql
Standard libraries and queries for CodeQL, powering GitHub Advanced Security and static application security testing.
What is codeql?
CodeQL is an open-source repository containing the standard libraries and queries for the CodeQL language, which is used for static application security testing (SAST). It enables developers and security researchers to write custom queries to identify vulnerabilities, bugs, and other issues in source code across multiple programming languages. These resources power GitHub Advanced Security and other GitHub security products.
Security researchers, application security engineers, and developers who need to perform deep, customizable static analysis on codebases to find security vulnerabilities.
It provides a comprehensive, community-maintained standard library of security queries and language definitions, allowing for extensible and precise code analysis. Being open-source, it fosters collaboration and continuous improvement in security checking capabilities.
Overview
CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
Use Cases
Best For
- Writing custom static analysis rules for proprietary codebases
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
