CodeQL
AssessTools
A code analysis engine used by GitHub code scanning to detect security issues in source code and workflows.
Why it's here
Placed in Assess: 3 article(s) of evidence from 2 source(s), led by security coverage, with 0 in the last 30 days. Confidence 45%.
Evidence (3)
- 7GitHub Blog·8/13/2026securityGitHub says 50 open source projects improved security with AI-era support
GitHub says the fourth session of its Secure Open Source Fund helped 50 projects strengthen security through funding, expert guidance, security tooling, and AI-assisted workflows. The program produced concrete outcomes such as incident response plans, expanded GitHub security feature adoption, workflow audits, and faster vulnerability triage and remediation.
- 6InfoQ·8/10/2026product_launchGitHub Launches AI-Assisted Code Quality Checks for Enterprise and Team
GitHub Code Quality is now generally available for GitHub Enterprise Cloud and GitHub Team. It combines CodeQL analysis with AI-assisted detection of maintainability and reliability issues, and can use Copilot Autofix to propose changes in pull requests.
- 7GitHub Blog·7/1/2026securityGitHub urges maintainers to enable key security settings
GitHub Security Lab highlights six free security settings that maintainers can enable in under 30 minutes to improve project security posture. The recommendations include adding a SECURITY.md file, enabling private vulnerability reporting, secret scanning with push protection, Dependabot and dependency review, and code scanning.