Brakeman vs GitHub CodeQL
Brakeman
brakemanscanner.org
GitHub CodeQL
codeql.github.comSide by side
| Figure | Brakeman | GitHub CodeQL |
|---|---|---|
| Price from | Free | $30/mo |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | — | Yes |
| Windows | — | Yes |
| macOS | — | Yes |
| Linux | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 5 |
| Spec score · Ruby Static Analysis Tools | 8.1 (#5) | 8.5 (#2) |
| Spec score · Static Application Security Testing Sast | 8.0 (#7) | 8.5 (#4) |
| Spec score · Static Analysis Tools | 8.0 (#14) | 8.5 (#8) |
| Spec score · SAST Tools | 8.0 (#10) | 8.5 (#5) |
| Spec score · Static Application Security Testing Software | 7.9 (#11) | 8.6 (#3) |
| Purpose | Brakeman is a static analysis scanner that checks Ruby on Rails application code for potential security vulnerabilities. | CodeQL is a language and toolchain for code analysis that treats code as data. |
Plans
GitHub CodeQL
- Free for research and open sourceFree
- GitHub Code Security$30 a month
- CodeQL for open source and researchFree
- GitHub Code Security$30 a month
- GitHub Free with CodeQL code scanningPrice not published
In their own words
Brakeman
Brakeman has no write-up on Specifiction yet; its figures are above.
GitHub CodeQL
GitHub CodeQL has no write-up on Specifiction yet; its figures are above.