codeql

XNU kernel, Kernel Collection and CodeQL build scripts

Unofficial Dockerfile and scripts for building CodeQL databases for the OpenJDK

Get to know more about the concepts of CodeQL by trying our simple tutorials.

Action to retrofit a CodeQL bundle with additional queries, libraries, and customizations

GH CLI CodeQL Scan Extension

WebKit/JSC CodeQL Databases

DYLD CodeQL build scripts

Hands-on study guide for the GH-500: GitHub Advanced Security certification. Covers all 5 exam domains with docs, demos, CodeQL, Dependabot config, and automation scripts.

Scan GitHub Actions workflow files with CodeQL

GKE Golden-Path IDP + Backstage portal, all-IaC (GHA + keyless WIF). Pluggable CI — 4 engines (Jenkins · Tekton · GitHub Actions/ARC · Argo Workflows) & secrets (imperative | Secret Manager+ESO); OTel → 4 Grafana backends (Cloud/OSS/Azure/AWS); ArgoCD + Argo Rollouts; Spot CI; Gateway+IAP SSO; HA CNPG + dev tier; Dataplane V2+WireGuard; DevSecOps

Enterprise-grade DevSecOps CI/CD Pipeline using GitHub Actions, Docker, Kubernetes, CodeQL, Trivy, Secret Scanning, and Automated Security Testing.

Local-first talking portrait CLI using Piper, Wav2Lip GAN, GFPGAN, and FFmpeg

DevOps and DevSecOps reference — notes, runbooks, scripts, and configs for Trivy, Syft, Checkov, Vault, and runtime security.

Reusable GitHub Actions workflows + shared configs (Node+Python): lint/type/test/build baseline, CodeQL/Dependabot templates.

Agentic GitHub governance template for AI-assisted repositories.

Demonstration of writing custom CodeQL rules and running them in CI

DevOps automation for the Spark Match platform: Reusable GitHub Actions workflows, CI/CD pipelines, contributor tooling, and operational scripts

Static Application Security Testing with Semgrep, CodeQL, and language-specific analyzers

Automate your CodeQL queries with confidence. This tool provides a secure, flexible, and production-ready way to run CodeQL queries, output SARIF reports, and decode BQRS results with minimal setup.