GitHub CodeQL vs Quickbench
GitHub CodeQL
codeql.github.comQuickbench
github.comSide by side
| Figure | GitHub CodeQL | Quickbench |
|---|---|---|
| Price from | $30/mo | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | — |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | Yes |
| Self-hosted | Yes | — |
| Plans published | 5 | 1 |
| Spec score · Disk Benchmark Software | 8.3 (#4) | 7.5 (#18) |
| Purpose | CodeQL is a language and toolchain for code analysis that treats code as data. | Quickbench is a Bash script that measures basic performance on Linux-based hosts. |
Plans
GitHub CodeQL
- Free for research and open sourceFree
- GitHub Code Security$30 a month
- CodeQL for open source and researchFree
- GitHub Code Security$30 a month
- GitHub Free with CodeQL code scanningPrice not published
In their own words
GitHub CodeQL
GitHub CodeQL has no write-up on Specifiction yet; its figures are above.
Quickbench
Quickbench is a free Bash script for measuring basic performance on Linux-based hosts, including virtual machines. It reports CPU configuration and runs busy-loop benchmarks at different parallel job counts, returning loop rates. Memory checks report Linux-allocatable memory and run a simple bandwidth test that may reflect L1 or L2 cache performance. Storage checks use parallel dd transfers with 4k and 1M blocks, reporting bandwidth and I/O rates. They run on the filesystem in the current working directory; to measure another device, mount its filesystem there and run Quickbench from that location. The script is designed for minimal Linux servers and needs no specific dependencies. It takes one parameter: the maximum duration in seconds for each benchmark loop. The project recommends at least 30 seconds for statistically meaningful results and cautions that values below 10 seconds may be unreliable. CPU loop measurements are not calibrated, so comparisons call for matching Quickbench, kernel, Bash, and dd versions. The project describes storage testing as non-thorough and says it cannot measure I/O completion latency. It is licensed under GPL-3.0.