bundler-audit vs GitHub CodeQL
bundler-audit
github.com
GitHub CodeQL
codeql.github.comSide by side
| Figure | bundler-audit | GitHub CodeQL |
|---|---|---|
| Price from | Free | $30/mo |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | — | Yes |
| Windows | — | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| Self-hosted | — | Yes |
| Plans published | 1 | 5 |
| Spec score · Ruby Static Analysis Tools | 7.9 (#7) | 8.5 (#2) |
| Purpose | bundler-audit provides patch-level verification for Bundler projects. | CodeQL is a language and toolchain for code analysis that treats code as data. |
Plans
GitHub CodeQL
- Free for research and open sourceFree
- GitHub Code Security$30 a month
- CodeQL for open source and researchFree
- GitHub Code Security$30 a month
- GitHub Free with CodeQL code scanningPrice not published
In their own words
bundler-audit
bundler-audit has no write-up on Specifiction yet; its figures are above.
GitHub CodeQL
GitHub CodeQL has no write-up on Specifiction yet; its figures are above.