Skip to content
SPECIFICTION
Get listed

GitHub CodeQL

codeql.github.com

From $30/mo Free plan WebWindowsmacOSLinuxSelf-hostedBrowser extension

Spec sheet

Purpose
CodeQL is a language and toolchain for code analysis that treats code as data.Read 28 Sep 2026 · codeql.github.com
Free plan
YesRead 21 Sep 2026 · github.com
Paid from
30Read 21 Sep 2026 · github.com
CI integration
The CodeQL bundle can be downloaded for an external CI system to generate code-scanning results and upload them to GitHub.Read 28 Sep 2026 · codeql.github.com
CodeQL tools
GitHub provides the CodeQL CLI and a CodeQL extension for Visual Studio Code.Read 28 Sep 2026 · codeql.github.com
Core workflow
CodeQL analysis creates a database, runs queries against it, and interprets the results for review and triage.Read 28 Sep 2026 · codeql.github.com
Custom queries
Users can write custom queries and package them in CodeQL packs for code scanning or CLI analysis.Read 28 Sep 2026 · codeql.github.com
GitHub Actions
The standard way to run CodeQL queries on a GitHub-hosted repository is to enable code scanning with GitHub Actions.Read 28 Sep 2026 · codeql.github.com
Language limitation
CodeQL does not support languages outside its listed supported languages, including PHP and Scala.Read 28 Sep 2026 · docs.github.com
Platform requirements
The latest CodeQL release supports Linux Ubuntu 22.04/24.04, Windows 10 or Windows Server 2019 and Windows 11 or Windows Server 2022/2025, and macOS 14/15/26.Read 28 Sep 2026 · codeql.github.com
Query types
CodeQL queries analyze code for security, correctness, maintainability, and readability issues.Read 28 Sep 2026 · codeql.github.com
Repository eligibility
Code scanning is available for public repositories and for organization-owned repositories on GitHub Team, GitHub Enterprise Cloud, or GitHub Enterprise Server with GitHub Code Security enabled.Read 28 Sep 2026 · docs.github.com
Security analysis
CodeQL is designed to automate security checks and help security researchers perform variant analysis.Read 28 Sep 2026 · codeql.github.com
Security coverage
CodeQL 2.26.2's Default suite contains 497 security queries covering 170 CWEs, while Extended adds 131 queries covering 32 more CWEs.Read 28 Sep 2026 · codeql.github.com
Supported languages
CodeQL supports C/C++, C#, Go, Java, Kotlin, JavaScript, TypeScript, Python, Ruby, Rust, Swift, and GitHub Actions workflows.Read 28 Sep 2026 · codeql.github.com

Plans and prices

Free for research and open source Free Research use · Open-source codebases Read 21 Sep 2026 · codeql.github.com
GitHub Code Security $30 a month per active committer/month CodeQL code scanning · Copilot Autofix · Dependency review Read 21 Sep 2026 · github.com
CodeQL for open source and research Free OSI-approved open source · academic research · specified automated analysis, CI, or CD Read 28 Sep 2026 · codeql.github.com
GitHub Code Security $30 a month per active committer/month Team or Enterprise plan required · private repositories Read 28 Sep 2026 · github.com
GitHub Free with CodeQL code scanning Price not published per month CodeQL available for public repositories Read 28 Sep 2026 · github.com

Every GitHub CodeQL plan and price →

Where Specifiction places it

Alternatives to GitHub CodeQLAll alternatives →