CodeQL is the static analysis engine behind GitHub code scanning, which finds and remediates security issues in your code. We’ve recently released CodeQL 2.26.1, which improves framework coverage for Go, Java/Kotlin, and JavaScript/TypeScript, and reduces false positives in Rust analysis.
Language and framework support
C/C++
Models-as-data flow summaries now use fully qualified field names, such as MyNamespace::MyStruct::myField. Unqualified field names remain supported but will be removed in 12 months.
Go
