GitHub CodeQL
codeql.github.com
Spec sheet
- Purpose
- CodeQL is a language and toolchain for code analysis that treats code as data.Read 28 Sep 2026 · codeql.github.com
- Free plan
- YesRead 21 Sep 2026 · github.com
- Paid from
- 30Read 21 Sep 2026 · github.com
- CI integration
- The CodeQL bundle can be downloaded for an external CI system to generate code-scanning results and upload them to GitHub.Read 28 Sep 2026 · codeql.github.com
- CodeQL tools
- GitHub provides the CodeQL CLI and a CodeQL extension for Visual Studio Code.Read 28 Sep 2026 · codeql.github.com
- Core workflow
- CodeQL analysis creates a database, runs queries against it, and interprets the results for review and triage.Read 28 Sep 2026 · codeql.github.com
- Custom queries
- Users can write custom queries and package them in CodeQL packs for code scanning or CLI analysis.Read 28 Sep 2026 · codeql.github.com
- GitHub Actions
- The standard way to run CodeQL queries on a GitHub-hosted repository is to enable code scanning with GitHub Actions.Read 28 Sep 2026 · codeql.github.com
- Language limitation
- CodeQL does not support languages outside its listed supported languages, including PHP and Scala.Read 28 Sep 2026 · docs.github.com
- Platform requirements
- The latest CodeQL release supports Linux Ubuntu 22.04/24.04, Windows 10 or Windows Server 2019 and Windows 11 or Windows Server 2022/2025, and macOS 14/15/26.Read 28 Sep 2026 · codeql.github.com
- Query types
- CodeQL queries analyze code for security, correctness, maintainability, and readability issues.Read 28 Sep 2026 · codeql.github.com
- Repository eligibility
- Code scanning is available for public repositories and for organization-owned repositories on GitHub Team, GitHub Enterprise Cloud, or GitHub Enterprise Server with GitHub Code Security enabled.Read 28 Sep 2026 · docs.github.com
- Security analysis
- CodeQL is designed to automate security checks and help security researchers perform variant analysis.Read 28 Sep 2026 · codeql.github.com
- Security coverage
- CodeQL 2.26.2's Default suite contains 497 security queries covering 170 CWEs, while Extended adds 131 queries covering 32 more CWEs.Read 28 Sep 2026 · codeql.github.com
- Supported languages
- CodeQL supports C/C++, C#, Go, Java, Kotlin, JavaScript, TypeScript, Python, Ruby, Rust, Swift, and GitHub Actions workflows.Read 28 Sep 2026 · codeql.github.com
Plans and prices
Free for research and open source Free Research use · Open-source codebases Read 21 Sep 2026 · codeql.github.com
GitHub Code Security $30 a month per active committer/month CodeQL code scanning · Copilot Autofix · Dependency review Read 21 Sep 2026 · github.com
CodeQL for open source and research Free OSI-approved open source · academic research · specified automated analysis, CI, or CD Read 28 Sep 2026 · codeql.github.com
GitHub Code Security $30 a month per active committer/month Team or Enterprise plan required · private repositories Read 28 Sep 2026 · github.com
GitHub Free with CodeQL code scanning Price not published per month CodeQL available for public repositories Read 28 Sep 2026 · github.com
Where Specifiction places it
- Desktop Search Software#1 of 578.5
- Cross-Platform App Development Frameworks#3 of 628.5
- Taskbar Customization Software#2 of 348.7
- Boot Manager Software#2 of 298.5
- Game Modding Tools#2 of 258.6
- Network Testing Software#3 of 338.7
- Minecraft Plugin Repositories#2 of 228.8
- Cli Tools#3 of 328.6
- Ruby Static Analysis Tools#2 of 218.5
- Version Control Software#6 of 628.6
- Database Schema Comparison Tools#3 of 258.4
- Static Application Security Testing Software#3 of 258.6