application-security

CodeQL

Definition

CodeQL is a semantic code analysis engine developed by GitHub that treats code as data and enables querying for security vulnerabilities using a declarative query language. It supports 10+ languages and ships with hundreds of built-in security queries covering OWASP Top 10 and CWE Top 25 issues.

CodeQL powers GitHub Advanced Security's code scanning feature and is available as a standalone CLI for CI integration.

Related Terms

SAST

Static Application Security Testing

Semgrep

OWASP ZAP

OWASP Zed Attack Proxy

← Back to Glossary

Ship secure code faster

Crash Override integrates security into the developer workflow. No context switching, no waiting on reviews.

Talk to a Human See the Product