Home / Companies / GitHub / Blog / Post Details
Content Deep Dive

ICYMI: CodeQL enhancements

Blog post from GitHub

Post Details
Company
Date Published
Author
Walker Chabbott, Pierre Tempel
Word Count
908
Language
English
Hacker News Points
-
Summary

GitHub has introduced several enhancements to CodeQL, its semantic analysis engine for code scanning, over the past year, which now includes support for new languages like Ruby and Kotlin, as well as full support for Java 19, Go 1.19, C#11, and Python 3.11. These updates allow for more comprehensive scanning of codebases, detecting vulnerabilities with an increased number of default security queries that cover all OWASP categories and 100% of SANS CWE Top 25. Improvements have also been made to the user experience, such as the ability to customize analysis with query filters and faster analysis speeds. Additionally, CodeQL packs and databases for popular open-source projects are now available, and the GitHub community continues to contribute significantly to the platform's development. CodeQL remains free for open-source repositories, while private repositories can access it through GitHub Advanced Security with a subscription.