awesome-codeql
github.com/advanced-security/awesome-codeql ↗A curated list of awesome CodeQL resources.
Use this list with your AI agent
Add the Context Awesome MCP server to Claude, Cursor, or any MCP client, then ask:
"Show me codeql containers resources from awesome-codeql"
Installation instructions →What's inside
Tooling & Environment
- Adding CodeQL to your (compiled) container buildCodeQL Containers
Blog walking through the complexities of implementing containerized CodeQL workloads sprinkled with bits of Kubernetes wisdom.
- advanced-security/codeql_container_exampleCodeQL Containers
Example showing CodeQL to scan containerized applications in GitHub Actions.
- advanced-security/codeql-development-templateCodeQL AI & LLM Tooling
Copilot-native repository template for CodeQL query development. Lowering the barrier to entry for CodeQL development through natural language and GitHub Copilot. A GitHub repository template for building custom CodeQL queries with AI assistance. This template provides a structured environment with prompts, instructions, and workflows designed to guide GitHub Copilot Coding Agent through the complete CodeQL development lifecycle.
- advanced-security/codeql-dockerCodeQL Containers
CodeQL Docker image
- advanced-security/gh-codeql-scanCodeQL CLI Tooling
GH CLI CodeQL Scan Extension
- advanced-security/grab_qlCodeQL Installers
Grab some/all of CodeQL CLI binary, QL library, VSCode starter workspace, VSCode and VSCode QL extension
GitHub Actions & CI/CD
- advanced-security/adjust-cvssCodeQL GitHub Actions Helpers
Adjust the severity of the CVSS score assigned to a result in SARIF file
- advanced-security/codeql-sarif-security-standard-annotatorCodeQL GitHub Actions Helpers
Add an
- advanced-security/delombokCodeQL GitHub Actions Helpers
Delombok Java Code for analysis with Code Scanning (deprecated - now
- advanced-security/dismiss-alertsCodeQL GitHub Actions Helpers
Dismisses GitHub Code Scanning alerts from
- advanced-security-enforcerCodeQL Enforcement
A GitHub action for organizations that enables advanced security code scanning on all new repos
- advanced-security/filter-sarifCodeQL GitHub Actions Helpers
GitHub Action for filtering Code Scanning alerts by path and id
Troubleshooting
- advanced-security/advanced-security-material
GitHub SARIF Upload Troubleshooting
- advanced-security/advanced-security-material
CodeQL Build Failure Troubleshooting
- github/codeql-coding-standards
CodeQL Coding Standards - Hazard and risk analysis
Customization & Query Development
- advanced-security/codeql-bundle-actionCodeQL Tooling (Bundles + Packs)
Action to retrofit a CodeQL bundle with additional queries, libraries, and customizations
- advanced-security/codeql-coding-standards-bundle-releasesCodeQL Queries/Bundles
CodeQL bundles containing the CodeQL Coding Standards queries
- advanced-security/codeql-extractor-actionCodeQL Extractors
specify a CodeQL extractor to be used in your workflows as an author of an Extractor.
- advanced-security/codeql-extractor-iacCodeQL Extractors
CodeQL Extractors, Library, and Queries for Infrastructure as Code ( Terraform / HCL, JSON, YAML, Container files, Bicep )
- advanced-security/codeql-qtilCodeQL Libraries & Utilities
A library with a wide variety of handy CodeQL utilities, from simple to complex.
- advanced-security/codeql-sap-jsCodeQL Extractors
CodeQL extractor/queries/models for SAP JavaScript frameworks CAP, UI5 and XSJS
Getting Started
- CodeQL as an Audit OracleYouTube learning
- CodeQL Custom Configuration FileDocumentation
- CodeQL Language GuideDocumentation
- CodeQL Learning CatalogCodeQL Getting Started and Guides (along side the official docs)
The CodeQL Learning Catalog is a resource dedicated providing detailed CodeQL learning resources. The Catalog contains workshops, recordings, and learning paths for improving your knowledge and skill in using CodeQL.
- CodeQL Query HelpDocumentation
- CodeQL Standard LibrariesDocumentation
Showing a sample of 86 resources. View the full list on GitHub →