GitHub CodeQL vs Marshal
GitHub CodeQL
codeql.github.comMarshal
marshalhq.devSide by side
| Figure | GitHub CodeQL | Marshal |
|---|---|---|
| Price from | $30/mo | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | — |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 5 | 3 |
| Spec score · Dependency Management Software | 8.6 (#4) | 8.1 (#11) |
| Purpose | CodeQL is a language and toolchain for code analysis that treats code as data. | Marshal scans Maven and Gradle dependencies for behavioral signs of supply-chain attacks and can block risky updates at pull-request time. |
Plans
GitHub CodeQL
- Free for research and open sourceFree
- GitHub Code Security$30 a month
- CodeQL for open source and researchFree
- GitHub Code Security$30 a month
- GitHub Free with CodeQL code scanningPrice not published
In their own words
GitHub CodeQL
GitHub CodeQL has no write-up on Specifiction yet; its figures are above.