microsoft / codeql-container
Prepackaged and precompiled github codeql container for rapid analysis, deployment and development.
☆118Updated last year
Alternatives and similar repositories for codeql-container:
Users that are interested in codeql-container are comparing it to the libraries listed below
- [Deprecated] GitHub's Field Team's CodeQL Custom Queries, Suites, and Configurations. See GitHubSecurityLab/CodeQL-Community-Packs instea…☆82Updated last year
- Collection of community-driven CodeQL query, library and extension packs☆151Updated this week
- Run CodeQL queries at scale using Multi-Repository Variant Analysis (MRVA)☆58Updated 3 weeks ago
- An example repository that demonstrates how the build custom CodeQL bundles that include query customizations through the `Customizations…☆25Updated 2 years ago
- Action to retrofit a CodeQL bundle with additional queries, libraries, and customizations☆26Updated last year
- GH CLI CodeQL Scan Extension☆19Updated 6 months ago
- SARIF Microsoft Visual Studio Code extension☆114Updated 3 weeks ago
- The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…☆142Updated last year
- GitHub Satellite 2020 workshops on finding security vulnerabilities with CodeQL for Java/JavaScript.☆210Updated 7 months ago
- A React-based component for viewing SARIF files.☆94Updated 5 months ago
- A curated list of awesome CodeQL resources.☆38Updated last month
- ☆189Updated 6 months ago
- CodeQL database manager☆48Updated 3 weeks ago
- Generic SAST Library☆131Updated 5 months ago
- My CodeQL queries collection☆96Updated last year
- OSS-Fuzz vulnerabilities for OSV.☆154Updated this week
- CodeQL workshops for GitHub Universe☆93Updated 2 years ago
- Intentionally vulnerable Go web app.☆43Updated 3 months ago
- CodeQL Security Queries☆26Updated this week
- Public disclosure channel for security vulnerabilities☆18Updated last year
- A comprehensive, systematic and actionable way to understand attacker behaviors and techniques with respect to the software supply chain☆92Updated 2 months ago
- A set of Python command line tools for working with SARIF files produced by code analysis tools☆109Updated 4 months ago
- Manager of third-party sources of Semgrep rules 🗂☆81Updated 9 months ago
- CodeQL zero to hero blog post series challenges☆119Updated 4 months ago
- Python classes for the SARIF object model☆43Updated last year
- GitHub Advanced Security Python Toolkit☆13Updated this week
- ☆60Updated 2 years ago
- Original workshops and staging area for new ones☆13Updated 6 months ago
- Ready to use docker image for CodeQL☆89Updated last year
- A collection of Semgrep rules which followed security guidelines for .NET and Java.☆22Updated 3 years ago