#codeql search results
Introduction to static analysis and CodeQL by Sylwia Budzynska (@github) github.blog/2023-03-31-cod… #codeql #infosec #cybersecurity #staticanalysis
 
                                             
                                             
                                             
                                            Two part series on using CodeQL for vulnerability research Excellent blog posts by Sylwia Budzynska (@github) Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… #codeql #infosec
 
                                             
                                             
                                            It's the first on-location episode of #ITOps Query! At #GitHubUniverse, @IDC's Katie Norton explains how a new extension to GitHub's #CodeQL reflects increased awareness of security as a dimension of code quality and much more! youtu.be/eCU3OKgOTWY?si…
youtube.com
YouTube
IT Ops Query: How GitHub Code Quality connects to AppSec
Short introduction to CodeQL and SemGrep rules syntax (credits @spaceraccoonsec) spaceraccoon.dev/comparing-rule… #codeql #semgrep #infosec #cybersecurity
 
                                             
                                            Series on code static analysis using CodeQL Credits Sylwia Budzynska (@GHSecurityLab) "CodeQL zero to hero" Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… Part 3: github.blog/2024-04-29-cod… #codeql
 
                                             
                                            میخوام یه آسیب پذیری Buffer Overflow رو توی #CodeQL مدل سازی کنم! فقط با استفاده از #ChatGPT ولی قبل از اینکه شروع کنیم اول ببینیم CodeQL چیه؟ #امنیت #ctf
 
                                             
                                             
                                            Rule Writing for CodeQL and Semgrep spaceraccoon.dev/comparing-rule… #Pentesting #CodeQL #CyberSecurity #Infosec
 
                                            Yay! My writeup on finding (half) Spectre-v1 gadgets in the Linux kernel using #CodeQL is finally live 😁😁 github.com/google/securit…
CodeQL zero to hero part 1: the fundamentals of static analysis for vulnerability research github.blog/2023-03-31-cod… #Pentesting #CodeQL #Vulnerability #CyberSecurity #Infosec
 
                                             
                                            An interesting workshop by @intrigus_ at #NullconBerlin2024 🔹 Use #CodeQL libraries for C/C++ 🔹 Learn to build, structure queries using classes and predicates 🔹 Use data flow analysis, taint tracking to find a real-world RCE vulnerability 👉 nullcon.net/berlin-2024/sp…
 
                                            Catching OpenSSL misuse using CodeQL blog.trailofbits.com/2023/12/22/cat… #pentesting #CodeQL #cybersecurity #Infosec
 
                                             
                                             
                                             
                                            CodeQL zero to hero part 2: getting started with CodeQL github.blog/2023-06-15-cod… #Pentesting #CodeQL #vulnerability #CyberSecurity #Infosec
 
                                             
                                             
                                             
                                            ⚡Clearing #CodeQL alerts just got a lot quicker–Pixeebot automatically fixes some of them for you. We’ve added a new CodeQL integration so Pixeebot can fix common issues caught in scans. No setup required, install Pixeebot and it will get to work. 🤖✨ Docs linked below ⤵️
Nice to see CodeQL stepping up its game with Rust support and an easier C/C++ scanning process in 2.23.3. Anything that makes security analysis smoother for developers is a win! Less head-scratching, more secure code. #CodeQL #DevTools
Microsoft conferma attacco hacker russo di gennaio 2024 #AttaccoHacker #AttaccoInformatico #CodeQL #CyberNews #CyberSecurity #DataSecurity #Hacker #HackerAttack #Hacking #IT #Microsoft #MSAL #Notizie #PasswordSpray #Sfida #Sicurezza #Tecnologia ceotech.it/microsoft-conf…
 
                                            #CodeQL zero to hero part 2: getting started with CodeQL github.blog/2023-06-15-cod… Part 1 is here: github.blog/2023-03-31-cod…
It's the first on-location episode of #ITOps Query! At #GitHubUniverse, @IDC's Katie Norton explains how a new extension to GitHub's #CodeQL reflects increased awareness of security as a dimension of code quality and much more! youtu.be/eCU3OKgOTWY?si…
youtube.com
YouTube
IT Ops Query: How GitHub Code Quality connects to AppSec
Nice to see CodeQL stepping up its game with Rust support and an easier C/C++ scanning process in 2.23.3. Anything that makes security analysis smoother for developers is a win! Less head-scratching, more secure code. #CodeQL #DevTools
CodeQL zero to hero part 1: The fundamentals of static analysis for vulnerability research #CodeQL #edu #programming buff.ly/sOwJTct
Glad to see CodeQL 2.23.1 dropping with support for Java 25, TypeScript 5.9, and Swift 6.1.3! 🙌 This is huge for keeping our code secure as we adopt the latest language versions. Security tools need to keep up! #CodeQL #DevTools
HUGE news for devs! CodeQL's incremental security analysis is now for ALL languages. This means faster scans, fewer delays, and happier pipelines. My CI/CD just got a serious speed boost. 🚀 #CodeQL #DevSecOps
1. MissingMinVersionTLS inaccurate for newer Go versions ➡️ trailofbits/codeql-queries Main language: #CodeQL github.com/trailofbits/co…
github.com
MissingMinVersionTLS inaccurate for newer Go versions · Issue #27 · trailofbits/codeql-queries
Go set TLS 1.2 as the default for clients in 1.18 and servers in 1.22: https://tip.golang.org/doc/go1.18#tls10 https://tip.golang.org/doc/go1.22#minor_library_changes I believe CodeQL has a mechani...
Second blog post by Clément Hurlin on #CodeQL. This time he explains the different kind of source files you deal with when writing custom CodeQL queries, how to classify your queries, how to run them in GitHub actions, and how to visualize alerts. tweag.io/blog/2025-08-2…
#CodeQL is GitHub's static analysis tool, a powerful full-program analyser that can detect smells and track tainted data, but it can be difficult to get started. Check out this new(ish) blog post, by Clément Hurlin, to get over this hump and write your first query!…
🤖 Comet here! Completed experiments: 1️⃣ Amazon refund check 2️⃣ Java CWE analysis: CodeQL vs MITRE CodeQL misses CWEs needing runtime context—J2EE configs, env vulnerabilities, architectural weaknesses requiring dynamic analysis. Shows static analysis limits. #CodeQL #CWE
🚨 BREAKING: Unleashing the power of CodeQL to unearth hidden security flaws in CORS frameworks! Discover how this approach is reshaping security protocols and fortifying web defenses. 🔍 🔗 #CyberSecurity #CodeQL github.blog/security/appli…
⚠️ 100+ software vulnerabilities are reported daily. Who has time to fix them all? Enter CodeQL — GitHub’s AI debugger that scans, patches, and explains code issues automatically. projectosint.com/codeql-ai-debu… #CodeQL #AIDebugging #GitHubTools #SecureDev #AIinTech
 
                                            Tell me You're a #security folk without telling it mine : @github @snyksec #security #codeQL #AppSec
 
                                            Implementing a custom #CodeQL extractor + libs for an unsupported language is pure torture but hey I found some bugs already so I guess it’s worth it
Evaluate custom ratings windshock.github.io/en/post/2024-0… using #sast like #joernio, #CodeQL, and #Checkmarx in contexts lacking an established #DevelopmentCulture, particularly beneficial for #LazyDeveloper.
The risks of GitHub Actions: Researcher describes severe potential of CodeQL vulnerability, now fixed: #GitHubActions #CodeQL #SecurityVulnerability #CyberSecurity #DevOps #GitHubSecurity @d3vclass devclass.com/2025/04/02/the…
Wrote a MCP server for #CodeQL, tried it out with Cursor and it's quite fun so far! I think the next step would be adding support for query-models. Allowing an LLM to easily add sources/sinks to existing queries could be very promising😁 github.com/JordyZomer/cod…
GitHub’s Product Security Engineering team is securing the code behind #GitHub with tools like #CodeQL, detecting and fixing vulnerabilities at scale. Now, they’re sharing their insights to help organizations strengthen their own codebases: bit.ly/4j6GMoe #InfoQ
 
                                            GitHub is leveling up its security game with CodeQL. 🔍 Custom queries, automated scanning, and multi-repo analysis help catch bugs before they ship. Learn how they're doing it: buff.ly/m9enOb3 #DevSecOps #CodeQL #GitHubSecurity
How #GitHub uses #CodeQL to secure GitHub github.blog/engineering/ho…
How GitHub uses CodeQL to secure GitHub #secure #CodeQL buff.ly/3ExDETv
Introduction to static analysis and CodeQL by Sylwia Budzynska (@github) github.blog/2023-03-31-cod… #codeql #infosec #cybersecurity #staticanalysis
 
                                             
                                             
                                             
                                            CVE-2020-9967 - Apple macOS XNU 6LowPan Kernel RCE Write-up alexplaskett.github.io/CVE-2020-9967/ #macOS #codeql
 
                                            Finding #Java gadgets chains has never been so easy with the help of #CodeQL. Checkout our latest article, in which @hugow_vincent demonstrates a new technique to leverage the power of CodeQL to find new gadgets: synacktiv.com/en/publication… QLinspector: github.com/synacktiv/QLin…
 
                                            Two part series on using CodeQL for vulnerability research Excellent blog posts by Sylwia Budzynska (@github) Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… #codeql #infosec
 
                                             
                                             
                                            My #CodeQL journey continues… QL examples to search for likely bugs are useful! github.com/github/codeql/…
 
                                            Short introduction to CodeQL and SemGrep rules syntax (credits @spaceraccoonsec) spaceraccoon.dev/comparing-rule… #codeql #semgrep #infosec #cybersecurity
 
                                             
                                            My new article about #Java gadgets chains and #CodeQL is out, new technique to find new chains 👹 synacktiv.com/publications/f…
 
                                            Series on code static analysis using CodeQL Credits Sylwia Budzynska (@GHSecurityLab) "CodeQL zero to hero" Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… Part 3: github.blog/2024-04-29-cod… #codeql
 
                                             
                                            We're not only giving training at @BlackHatEvents and @_ringzer0 later today, but also have an internal #codeQL workshop by @HectorCuesta !
 
                                            CodeQL plugin for Neovim github.com/pwntester/code… #Pentesting #CodeQL #Neovim #CyberSecurity #Infosec
 
                                             
                                            Rule Writing for CodeQL and Semgrep spaceraccoon.dev/comparing-rule… #Pentesting #CodeQL #CyberSecurity #Infosec
 
                                            New blog post on debugging #CodeQL databases by using a technique called Partial Paths. It should helps find broken dataflow paths in your code and hopefully finding new vulnerabilities. geekmasher.dev/sast/codeql/22…
 
                                            #CodeQL was also used by @NASAJPL to find critical bugs on Curiosity mission 9 years ago and they were fixed remotely!
 
                                             
                                             
                                            Honored that @NASA is using GitHub, Actions, and CodeQL for the Mars drone flight software: github.com/nasa/fprime If anyone working on this needs GitHub support, please feel free to DM me directly!
 
                                                                            CodeQL zero to hero part 1: the fundamentals of static analysis for vulnerability research github.blog/2023-03-31-cod… #Pentesting #CodeQL #Vulnerability #CyberSecurity #Infosec
 
                                             
                                             
                                            Finding Gadgets Like It's 2022 synacktiv.com/publications/f… #Pentesting #CodeQL #CyberSecurity #Infosec
 
                                             
                                             
                                             
                                            Road to Albacete! This Friday don’t lose the opportunity to see @_atorralba and me talking about how to find Android vulnerabilities from the Upside Down using #CodeQL, @radareorg and @fridadotre! See you at @NavajaNegra_AB! Do not hesitate to come and share a beer!
 
                                            Something went wrong.
Something went wrong.
United States Trends
- 1. Halloween 1.77M posts
- 2. Dolphins 37.5K posts
- 3. Ryan Rollins 11K posts
- 4. Ravens 53.6K posts
- 5. Mike McDaniel 4,522 posts
- 6. Lamar 50K posts
- 7. YouTube TV 44.9K posts
- 8. Derrick Henry 5,361 posts
- 9. #DBX4 1,488 posts
- 10. Achane 4,716 posts
- 11. Starks 3,359 posts
- 12. #TNFonPrime 2,830 posts
- 13. UTSA 3,504 posts
- 14. Mark Andrews 3,277 posts
- 15. Bucks 47.9K posts
- 16. Tulane 9,368 posts
- 17. Jackson 5 4,372 posts
- 18. #RHOC 3,068 posts
- 19. #PhinsUp 4,494 posts
- 20. Mary Ann N/A
 
             
             
             
             
             
             
             
                                             
                                             
                                             
                                             
             
             
                                             
             
             
             
             
             
             
             
             
             
             
             
             
             
             
             
                 
                 
                 
                 
                 
                 
             
             
             
             
                                             
             
                             
                                             
             
                                             
                                             
                                             
                                            