github-security-lab Open-Source Projects

codeql

16 7,156 10.0 CodeQL

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

Project mention: Show HN: GritQL, a Rust CLI for rewriting source code | news.ycombinator.com | 2024-03-20

apologies if this should be a discussion/issue/whatever but:
Do you envision going up against CodeQL and/or <https://www.jetbrains.com/help/qodana/about-qodana.html> by making semantic information available to the ast nodes? OT1H, I can imagine it could be an overwhelming increase in project scope, but OTOH it could also truly lead to some stunning transformation patterns
e.g. https://github.com/github/codeql/blob/v1.27.0/java/ql/exampl... or even more "textual" semantics such as
  var foo = "hello".substring(1); // knowing "foo" is a String

GitGoat

9 162 0.0 Python

GitGoat is an open source tool that was built to enable DevOps and Engineering teams to design and implement a sustainable misconfiguration prevention strategy. It can be used to test products with access to GitHub repositories without a risk to your production environment.
InfluxDB

www.influxdata.com featured

Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).

github-security-lab related posts

Discover vulnerabilities across a codebase with semantic code analysis engine

1 project | news.ycombinator.com | 7 Sep 2023
GitHub introduces CodeQL, a new tool for automated code review and vulnerability

1 project | /r/CKsTechNews | 20 Jan 2023
GitHub introduces CodeQL, a new tool for automated code review and vulnerability

1 project | news.ycombinator.com | 20 Jan 2023
Blizzard has announced that the quest log cap will be increased to 35, after many years of staying capped at 25. Happy questing!

1 project | /r/wow | 10 Dec 2022
How to see if your JavaScript code is vulnerable

1 project | dev.to | 7 Nov 2022
emacs-codeql: a package to write and test CodeQL queries

4 projects | /r/emacs | 7 Apr 2022
What does CodeQL Github Action really do ?

1 project | /r/github | 19 Jan 2022
A note from our sponsor - SaaSHub
www.saashub.com | 14 May 2024

SaaSHub helps you find the best software and product alternatives Learn more →