Alternatives and similar repositories for codeql

Users that are interested in codeql are comparing it to the libraries listed below

• github / codeql-cli-binaries
  Binaries for the CodeQL CLI
  ☆885Updated last week
• github / advisory-database
  Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
  ☆2,010Updated this week
• google / oss-fuzz
  OSS-Fuzz - continuous fuzzing for open source software.
  ☆11,370Updated this week
• github / codeql-action
  Actions for running CodeQL analysis
  ☆1,379Updated this week
• github / securitylab
  Resources related to GitHub Security Lab
  ☆1,532Updated last month
• semgrep / semgrep
  Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
  ☆13,027Updated this week
• joernio / joern
  Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.…
  ☆2,659Updated this week
• github / vscode-codeql
  An extension for Visual Studio Code that adds rich language support for CodeQL
  ☆478Updated this week
• ossf / scorecard
  OpenSSF Scorecard - Security health metrics for Open Source
  ☆5,102Updated this week
• microsoft / restler-fuzzer
  RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security…
  ☆2,812Updated last month
• microsoft / onefuzz
  A self-hosted Fuzzing-As-A-Service platform
  ☆2,823Updated last year
• CVEProject / cvelist
  Pilot program for CVE submission through GitHub. CVE Record Submission via Pilot PRs ending 6/30/2023
  ☆1,485Updated 4 months ago
• google / fuzzing
  Tutorials, examples, discussions, research proposals, and other resources related to fuzzing
  ☆3,715Updated 11 months ago
• google / clusterfuzz
  Scalable fuzzing infrastructure.
  ☆5,482Updated this week
• actions / runner
  The Runner for GitHub Actions
  ☆5,566Updated this week
• google / osv-scanner
  Vulnerability scanner written in Go which uses the data provided by https://osv.dev
  ☆7,870Updated this week
• ASTTeam / CodeQL
  《深入理解CodeQL》Finding vulnerabilities with CodeQL.
  ☆1,683Updated last year
• cdk-team / CDK
  📦 Make security testing of K8s, Docker, and Containerd easier.
  ☆4,414Updated 7 months ago
• google / syzkaller
  syzkaller is an unsupervised coverage-guided kernel fuzzer
  ☆5,842Updated last week
• google / AFL
  american fuzzy lop - a security-oriented fuzzer
  ☆3,973Updated 4 years ago
• angr / angr
  A powerful and user-friendly binary analysis platform!
  ☆8,200Updated this week
• mbechler / marshalsec
  ☆3,602Updated 9 months ago
• anchore / syft
  CLI tool and library for generating a Software Bill of Materials from container images and filesystems
  ☆7,762Updated this week
• google / security-research
  This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-…
  ☆4,220Updated this week
• AFLplusplus / AFLplusplus
  The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power…
  ☆6,020Updated this week
• jpillora / chisel
  A fast TCP/UDP tunnel over HTTP
  ☆15,135Updated last month
• snyk / cli
  Snyk CLI scans and monitors your projects for security vulnerabilities.
  ☆5,271Updated this week
• google / tsunami-security-scanner
  Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with h…
  ☆8,471Updated last week
• projectdiscovery / nuclei-templates
  Community curated list of templates for the nuclei engine to find security vulnerabilities.
  ☆11,001Updated this week
• semgrep / semgrep-rules
  Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.
  ☆996Updated this week