GitHub CodeQL
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Free for research and open source | Research use · Open-source codebases | Free |
| CodeQL for open source and research | OSI-approved open source · academic research · specified automated analysis, CI, or CD | Free |
| GitHub Code Security | per active committer/month · Team or Enterprise plan required · private repositories | $30 a month |
| GitHub Free with CodeQL code scanning | per month · CodeQL available for public repositories | On request |
As codeql.github.com lists them, read 21 Sept 2026. The maker's own page has the final word.
Facts from GitHub CodeQL's own pages
- CI integration
- The CodeQL bundle can be downloaded for an external CI system to generate code-scanning results and upload them to GitHub. · codeql.github.com, 28 Sept 2026
- CodeQL tools
- GitHub provides the CodeQL CLI and a CodeQL extension for Visual Studio Code. · codeql.github.com, 28 Sept 2026
- Core workflow
- CodeQL analysis creates a database, runs queries against it, and interprets the results for review and triage. · codeql.github.com, 28 Sept 2026
- Custom queries
- Users can write custom queries and package them in CodeQL packs for code scanning or CLI analysis. · codeql.github.com, 28 Sept 2026
- Free plan
- Yes · github.com, 21 Sept 2026
- GitHub Actions
- The standard way to run CodeQL queries on a GitHub-hosted repository is to enable code scanning with GitHub Actions. · codeql.github.com, 28 Sept 2026
- Language limitation
- CodeQL does not support languages outside its listed supported languages, including PHP and Scala. · docs.github.com, 28 Sept 2026
- Platform requirements
- The latest CodeQL release supports Linux Ubuntu 22.04/24.04, Windows 10 or Windows Server 2019 and Windows 11 or Windows Server 2022/2025, and macOS 14/15/26. · codeql.github.com, 28 Sept 2026
- Purpose
- CodeQL is a language and toolchain for code analysis that treats code as data. · codeql.github.com, 28 Sept 2026
- Query types
- CodeQL queries analyze code for security, correctness, maintainability, and readability issues. · codeql.github.com, 28 Sept 2026
- Repository eligibility
- Code scanning is available for public repositories and for organization-owned repositories on GitHub Team, GitHub Enterprise Cloud, or GitHub Enterprise Server with GitHub Code Security enabled. · docs.github.com, 28 Sept 2026
- Security analysis
- CodeQL is designed to automate security checks and help security researchers perform variant analysis. · codeql.github.com, 28 Sept 2026
- Security coverage
- CodeQL 2.26.2's Default suite contains 497 security queries covering 170 CWEs, while Extended adds 131 queries covering 32 more CWEs. · codeql.github.com, 28 Sept 2026
- Paid from
- 30 · github.com, 21 Sept 2026
- Supported languages
- CodeQL supports C/C++, C#, Go, Java, Kotlin, JavaScript, TypeScript, Python, Ruby, Rust, Swift, and GitHub Actions workflows. · codeql.github.com, 28 Sept 2026
Where GitHub CodeQL stands on Freedom251
- SAST Tools#5 of 25
- Static Application Security Testing Software#5 of 24
- Static Analysis Tools#9 of 37
- C and C++ Static Analysis Tools#6 of 24
- PC Optimization Software#30 of 103
- Chatbot Builders#101 of 258
- Game Mod Managers#44 of 79