Loading
Topic
CodeQL
6 posts about CodeQL by 5 contributors.
Know CodeQL? Share what you know with developers who are learning it.
+ Follow CodeQLBe the first to follow this
- Articles
- 6
- Contributors
- 5
Articles about CodeQL
- Article · Cyber Security
CodeQL 2.27.2 Brings Analysis Updates for C++, Go, Rust, and JavaScript
Learn how CodeQL 2.27.2 affects security analysis for C++, Go, Rust, and JavaScript, and how to validate updates in GitHub code-scanning workflows.
- Article · Security
CodeQL 2.27.2 Adds C++ Regex Support and Improves Go, Rust, and JavaScript Analysis
CodeQL 2.27.2 adds C++ regex parsing and improves security analysis, data-flow modeling, and framework support for Go, Rust, JavaScript, TypeScript, and C#.
- Article · Security
Debugging SQL Injection Paths With CodeQL's New Comdb2 Models
Learn how CodeQL 2.27.2 models Comdb2 C API statement functions as SQL injection sinks, improving detection of unsafe query construction in C and C++ applications.
- Article · Security
GitHub Code Scanning: Why Are Inactive Repositories Now Skipped?
Learn how GitHub CodeQL default setup pauses weekly scheduled scans for inactive repositories and how pushes or pull requests resume them.
- Article · Cyber Security
CodeQL GitHub Actions Queries: Building a Workflow Injection Security Test Suite
Learn how to use CodeQL with GitHub Actions to detect workflow injection vulnerabilities, unsafe expressions, untrusted inputs, and CI/CD security risks before production.
- Article · Software Testing
Security Testing Automation: Integrating SAST and DAST in Pipelines
Security testing automation is essential in modern DevSecOps practices. Integrating Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) into CI/CD pipelines ensures early detection and remediation of vulnerabilities.
