github/codeql-action
Actions for running CodeQL analysis
Build with Backblaze B2
SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.
Loading star history...
Where it stands
Rank, growth pace and release cadence relative to everything GStars tracks.
5 releases in the last 90 days, the latest 10 days ago, with 87 contributors on GitHub.
Use Cases & Benefits
- Runs CodeQL semantic code analysis on repositories to detect security vulnerabilities and uploads results to GitHub for visibility.
- Integrates seamlessly with GitHub Actions and supports multiple build modes for flexible, automated security scanning in CI workflows.
- Use for automating security vulnerability detection in open source or private repositories with GitHub Advanced Security enabled.
- Use for customizing code scanning configurations to tailor security analysis to complex or multi-language projects.
- Use for uploading SARIF reports from third-party static analysis tools to unify security findings within GitHub Code Scanning.
Should you depend on it?
License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.
License
MIT
Permissive: commercial use, modification and redistribution are allowed with attribution.
Community files
- README: present
- Contributing guide: present
- Code of conduct: present
Watch-outs
No watch-outs from GStars' checks.
General guidance from repository metadata, not legal advice. How we score
From the README
This action runs GitHub's industry-leading semantic code analysis engine, CodeQL, against a repository's source code to find security vulnerabilities. It then automatically uploads the results to GitHub so they can be displayed on pull requests and in the repository's security tab. CodeQL runs an extensible set of queries, which have been developed by the community and the GitHub Security Lab to find common vulnerabilities in your code.
For a list of recent changes, see the CodeQL Action's changelog.
Daily snapshots
Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots
Forks
502+25
Open issues
198+11
Compared with peers in Web
Fastest-growing repositories GStars tracks in this cohort for the week of Nov 1, by 7-day star growth
| Repository | Stars | +7d | Health | Last release |
|---|---|---|---|---|
| pingdotgg/t3code | 48.4K | +16.6K | 40 | today |
| pbakaus/impeccable | 104.0K | +8.7K | 54 | 10 days ago |
| HunYiSage/dsh-purge | 19.2K | +6.2K | 13 | today |
| Renhuai123/ziwei-doushu | 16.2K | +6.1K | 44 | 21 days ago |
| paperclipai/paperclip | 111.5K | +2.8K | 59 | 13 days ago |
| github/codeql-action | 1.7K | — | 64 | 10 days ago |
| Category median | 48.4K | +6.2K | 44 | — |
Also by github
Other repositories from this maintainer that GStars tracks
- Python147.9K stars
spec-kit
💫 Toolkit to help you get started with SDD or any other process!
- JavaScript40.8K stars
awesome-copilot
Community-contributed instructions, agents, skills, and configurations to help you make the most of GitHub Copilot.
- Go34.3K stars
github-mcp-server
GitHub's official MCP Server
- TypeScript21.3K stars
docs
The open-source repo for docs.github.com
- Python11.4K stars
copilot-cli
GitHub Copilot CLI brings the power of Copilot coding agent directly to your terminal.
Discover Repositories
Search across tracked repositories by name or description