Categories

Technology

CodeQL in GitHub Advanced Security: what it actually covers

CodeQL is GitHub's semantic code analysis engine and the heart of the GitHub Advanced Security offering. It succeeded Semmle, which GitHub acquired on September 18, 2019, and its query libraries now cover almost every language a mid-sized company uses: Rust went generally available on October 14, 2025, and Kotlin moved to an official analyzer.