CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

This repository contains CodeQL queries and libraries which support various Coding Standards.

WebGoat is a deliberately insecure application

CLI to build a custom CodeQL bundle

A Proof-Of-Concept for the CVE-2021-44228 vulnerability.

A CodeQL workshop covering CVE-2021-21380

Command line tools for working with SARIF files

Benchmark apps for static analyzing native world of Android applications.

This bootcamp is designed to familiarize you with GitHub Advanced Security (GHAS) so that you can better understand how to use it in your own repositories.

Original workshops and staging area for new ones

Example project layout that can be used to develop custom query packs

An example of a setting up the codeql cli/library/vs code plugins together