Robuta

https://github.blog/security/vulnerability-research/sharing-security-expertise-through-codeql-packs-part-i/ Sharing security expertise through CodeQL packs (Part I) - The GitHub Blog Introducing CodeQL packs to help you codify and share your knowledge of vulnerabilities. part igithub blogsharingsecurityexpertise https://github.blog/security/application-security/modeling-cors-frameworks-with-codeql-to-find-security-vulnerabilities/ Modeling CORS frameworks with CodeQL to find security vulnerabilities - The GitHub Blog Jul 10, 2025 - Discover how to increase the coverage of your CodeQL CORS security by modeling developer headers and frameworks. security vulnerabilitiesgithub blogmodelingcorsframeworks https://github.blog/changelog/2026-04-21-codeql-now-supports-sanitizers-and-validators-in-models-as-data/ CodeQL now supports sanitizers and validators in models-as-data - GitHub Changelog Apr 21, 2026 - CodeQL is the static analysis engine behind GitHub code scanning, which finds and remediates security issues in your code. You can now define custom sanitizers... codeqlsupportssanitizersvalidatorsmodels https://github.blog/security/vulnerability-research/announcing-codeql-community-packs/ Announcing CodeQL Community Packs - The GitHub Blog Dec 26, 2024 - We are excited to introduce the new CodeQL Community Packs, a comprehensive set of queries and models designed to enhance your code analysis capabilities.... github blogannouncingcodeqlcommunitypacks https://github.blog/security/vulnerability-research/codeql-zero-to-hero-part-5-debugging-queries/ CodeQL zero to hero part 5: Debugging queries - The GitHub Blog Oct 7, 2025 - Learn to debug and fix your CodeQL queries. zero to heropart 5github blogcodeqldebugging https://github.blog/security/vulnerability-research/codeql-zero-to-hero-part-4-gradio-framework-case-study/ CodeQL zero to hero part 4: Gradio framework case study - The GitHub Blog Feb 19, 2026 - Learn how I discovered 11 new vulnerabilities by writing CodeQL models for Gradio framework and how you can do it, too. zero to heropart 4case studygithub blogcodeql https://github.blog/changelog/2026-04-15-codeql-2-25-2-adds-kotlin-2-3-20-support-and-other-updates/ CodeQL 2.25.2 adds Kotlin 2.3.20 support and other updates - GitHub Changelog Apr 15, 2026 - CodeQL 2.25.2 adds new support for Kotlin, reduces false positives, and other updates codeqladdskotlinsupportupdates https://sean.heelan.io/2023/03/01/finding-10x-performance-improvements-in-c-with-codeql-part-2-2-on-combining-dynamic-and-static-analysis-for-performance-optimisation/ Finding 10x+ Performance Improvements in C++ with CodeQL – Part 2/2 on Combining Dynamic and Static... In the previous post I advocated for building systems that combine static and dynamic analysis for performance optimisation. By doing so, we can build tools... performance improvementspart 2finding10xcodeql