Bearer vs GitHub CodeQL
Bearer
bearer.com
GitHub CodeQL
codeql.github.comSide by side
| Figure | Bearer | GitHub CodeQL |
|---|---|---|
| Price from | Free | $30/mo |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | — | Yes |
| Windows | — | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| Self-hosted | — | Yes |
| Plans published | 1 | 5 |
| Spec score · Static Application Security Testing Sast | 7.7 (#11) | 8.5 (#4) |
| Spec score · SAST Tools | 7.7 (#15) | 8.5 (#5) |
| Spec score · Static Application Security Testing Software | 7.7 (#17) | 8.6 (#3) |
| Supported languages | The documentation lists Go, Python, PHP, JavaScript, TypeScript, Ruby, and Java as supported stacks. | CodeQL supports C/C++, C#, Go, Java, Kotlin, JavaScript, TypeScript, Python, Ruby, Rust, Swift, and GitHub Actions workflows. |
Plans
GitHub CodeQL
- Free for research and open sourceFree
- GitHub Code Security$30 a month
- CodeQL for open source and researchFree
- GitHub Code Security$30 a month
- GitHub Free with CodeQL code scanningPrice not published
In their own words
Bearer
Bearer CLI is a free static application security testing tool for Linux and macOS. It scans source code and analyzes data flows to identify security and privacy risks while analyzing code patterns instead of viewing actual data values. The tool supports more than 120 sensitive data types, including personal data, PII, and PHI. Privacy reports can show sensitive data, related data subjects, and internal or third-party components that process it, with information useful for GDPR records of processing activities. Security features include SAST rules and a separate hard-coded-secrets scanner. Bearer documents pull-request and CI/CD use with GitHub Actions, GitLab CI/CD, and CircleCI, plus custom security rules. Listed stacks include Go, Python, PHP, JavaScript, TypeScript, Ruby, and Java. Installation options include scripts, Homebrew, Linux package managers, Docker, and binaries. macOS 12 or later and Git 2.34 or later are required.
GitHub CodeQL
GitHub CodeQL has no write-up on Specifiction yet; its figures are above.