A GitHub Security Lab initiative, providing an in-repo learning experience, where learners secure intentionally vulnerable code.

• UpdatedNov 5, 2025
• JavaScript

Extensions to the PHP Reflection API, static code scanning, and code generation

• UpdatedNov 1, 2025
• PHP

Actions for running CodeQL analysis

• UpdatedNov 12, 2025
• TypeScript

🚀 Useful README.md, LICENSE, CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, GitHub Issues, Pull Requests and Actions templates to jumpstart your projects.

• UpdatedAug 10, 2024
• Python

📝 Source repository of Qodana Help

• UpdatedNov 7, 2025

⚙️ Scan your Go, Java, Kotlin, PHP, Python, JavaScript, TypeScript, .NET projects at GitHub with Qodana. This repository contains Qodana for Azure, GitHub, CircleCI and Gradle

• UpdatedNov 11, 2025
• JavaScript

Telling tales on you for leaking secrets!

• UpdatedOct 13, 2025
• Go

🔧 JetBrains Qodana’s official command line tool

• UpdatedNov 11, 2025
• Go

codemillx is a tool for CodeQL, extract the comments in the code and generate codeql module. 强化Go开源项目安全检测(内含开源项目漏洞挖掘方法)

• UpdatedMar 19, 2022
• Go

NaiveSystems Analyze is a static analysis tool for code security and compliance.

• UpdatedNov 12, 2025
• C++

This repository contains CodeQL queries and libraries which support various Coding Standards.

• UpdatedNov 8, 2025
• CodeQL

GitHub Advance Security Compliance Action

• UpdatedDec 14, 2022
• Python

An open-source security suite aiming to combine structural code analysis with AI-powered vulnerability detection. Built for advanced structural search, derive insights, find vulnerabilities in code.

• UpdatedNov 10, 2025
• Go

• UpdatedOct 29, 2025
• Shell

Code scanner to check for issues in prompts and LLM calls

• UpdatedApr 6, 2025
• Python

Codety Scanner is a comprehensive code scanner designed to detect code issues for 30+ programming languages and IaC frameworks. It embeds more than 6,000 code analysis rules and can detect code smells, vulnerable code, secrets in the code, performance issues, style violations, and more.

• UpdatedOct 31, 2025
• Java

A GitHub action for organizations that enables advanced security code scanning on all new repos

• UpdatedOct 28, 2025
• Python

CodeScanAI is an open source tool that utilizes powerful AI models (OpenAI, Gemini, and even self-hosted servers) to scan your codebase for possible security vulnerabilities.

• UpdatedOct 27, 2025
• Python

GitHub Action for filtering Code Scanning alerts by path and id

• UpdatedOct 16, 2024
• Java

Action to retrofit a CodeQL bundle with additional queries, libraries, and customizations

• UpdatedMay 8, 2024
• Shell