github.com/github/codeql ↗
CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
An animated visualization of github/codeql's Git history from August 2018 to December 2020, built by 144 contributors. The codebase reached 85,874 lines, mostly CodeQL. The video runs 1 minute 38 seconds.
Render your own repo
Turn any GitHub repository into a video like this — free sample in seconds.
Open this visualization on its own page →
Language
CodeQL
Contributors
144
Lines of Code
85,874
From
2018-08-02
To
2020-12-22
Advertisement
About github/codeql
CodeQL is GitHub's open-source static analysis engine that powers GitHub Advanced Security and other application security products. It contains the standard libraries and queries used by security researchers and developers to identify vulnerabilities in code across multiple programming languages. The project serves both as a comprehensive security tool for enterprise customers and as an accessible resource for the broader security community.
The repository houses the core CodeQL language libraries, vulnerability detection queries, and security checks that enable code scanning at scale. Users can write custom queries using the CodeQL language to analyze code for security issues, quality problems, and compliance violations. GitHub provides extensive documentation on the CodeQL language itself, a Visual Studio Code extension for interactive query development, and a command-line interface for automated analysis workflows.
The project actively welcomes community contributions through pull requests for new security checks and improvements to existing queries. GitHub maintains style guides and contribution guidelines to ensure consistency across the codebase. The MIT-licensed libraries in this repository can be freely used, though the CodeQL CLI engine itself requires a separate commercial license for analyzing closed-source code.
Advertisement