A curated list of awesome CodeQL resources.
☆78Feb 10, 2026Updated last month
Alternatives and similar repositories for awesome-codeql
Users that are interested in awesome-codeql are comparing it to the libraries listed below
Sorting:
- GitHub Advanced Security Python Toolkit☆14Updated this week
- A GitHub Action that helps remove GHAS Licences☆12Jul 15, 2024Updated last year
- GitHub Action for filtering Code Scanning alerts by path and id☆37Mar 11, 2026Updated last week
- [Deprecated] GitHub's Field Team's CodeQL Custom Queries, Suites, and Configurations. See GitHubSecurityLab/CodeQL-Community-Packs instea…☆85May 1, 2024Updated last year
- CodeQL Extractor, Library, and Queries for Infrastructure as Code☆59Updated this week
- Action to detect if a secret is initially detected in a PR commit☆11Jun 19, 2023Updated 2 years ago
- ☆10Mar 10, 2025Updated last year
- ☆10Oct 16, 2025Updated 5 months ago
- ☆76Feb 27, 2026Updated 3 weeks ago
- Automatically set the CodeQL matrix job using the languages in your repository.☆18Jan 8, 2026Updated 2 months ago
- CodeQL queries developed by Trail of Bits☆151Feb 26, 2026Updated 3 weeks ago
- Collection of community-driven CodeQL query, library and extension packs☆205Dec 15, 2025Updated 3 months ago
- A tool that aims to bulk automates the enablement of GitHub Code Scanning, Secret Scanning and Dependabot across multiple repositories.☆158Jun 17, 2024Updated last year
- tree-sitter grammar for the CodeQL language☆34Aug 29, 2025Updated 6 months ago
- CodeQL Guide☆11Jan 12, 2022Updated 4 years ago
- Present ZAProxy results in GitHub Advanced Security☆18May 24, 2024Updated last year
- GitHub Advance Security Compliance Action☆134Dec 14, 2022Updated 3 years ago
- GitHub Secret Scanning Auto Remediator (GSSAR)☆47Jan 1, 2026Updated 2 months ago
- Run CodeQL queries at scale using Multi-Repository Variant Analysis (MRVA)☆61Apr 16, 2025Updated 11 months ago
- The Power exists because documentation without examples is just an API reference, and it's been the industry's biggest productivity kille…☆210Updated this week
- ✏️ 🔒 Issue ops template automation that allows someone to become an admin of an organization during a short period of time☆14Dec 8, 2025Updated 3 months ago
- GitHub Code Scanning Mean Time to Remediate (GCSMTTR)☆14Jun 27, 2023Updated 2 years ago
- Binaries for the CodeQL CLI☆957Updated this week
- An OIDC client to retrieve a GitHub API scoped token from within an Actions workflow☆34Apr 19, 2024Updated last year
- JavaScript Transformation Techniques Detection☆11Jun 14, 2021Updated 4 years ago
- CodeQL zero to hero blog post series challenges☆167Sep 29, 2025Updated 5 months ago
- Git Anti-Virus Scan Action - Detect trojans, viruses, malware & other malicious threats.☆53Mar 10, 2026Updated last week
- Microsoft Visual C++ Code Analysis GitHub Action☆46Jul 19, 2023Updated 2 years ago
- ☆14Mar 9, 2026Updated last week
- SARIF formatter for PHPStan☆13Mar 1, 2026Updated 2 weeks ago
- ☆15Feb 6, 2023Updated 3 years ago
- GitHub Office Hours - Adopting GitHub Actions at scale in the Enterprise☆57Apr 8, 2023Updated 2 years ago
- 在原版nps的基础上，增加了nps探测，以及对应的利用方式（如获取cookie，页面等），进行一些简单的二开。未经过大量测试，可能存在bug。☆21Aug 5, 2025Updated 7 months ago
- Artifacts of the paper "Arcanum: Detecting and Evaluating the Privacy Risks of Browser Extensions on Web Pages and Web Content" in USENIX…☆17Aug 9, 2024Updated last year
- This repository hosts the download links for LGTM Enterprise.☆19Apr 8, 2022Updated 3 years ago
- Prepackaged and precompiled github codeql container for rapid analysis, deployment and development.☆123Nov 27, 2023Updated 2 years ago
- GitHub token permissions Monitor and Advisor actions☆356Jan 31, 2026Updated last month
- Sydr benchmark applications☆17Jul 25, 2022Updated 3 years ago
- GitHub Advanced Security Pull Request Security Team required review GitHub App☆36Mar 2, 2026Updated 2 weeks ago