GitHub CodeQL
7.5#1 in git gui clientsFrom $30 a monthFree planWebExtensionLinuxmacOS
VisitGitHub CodeQL vs GitHub Secret Scanning
GitHub Secret Scanning
5.9#14 in static application security testing sastFrom $19 a monthWebAPISelf-hosted
VisitWhat both publish
| Fact | GitHub CodeQL | GitHub Secret Scanning |
|---|---|---|
| Purpose | CodeQL is a language and toolchain for code analysis that treats code as data. | Secret scanning automatically detects exposed credentials so they can be secured before they are exploited. |
GitHub CodeQL plans
- Free for research and open sourceFree
- CodeQL for open source and researchFree
- GitHub Code Security$30 a month
- GitHub Free with CodeQL code scanning—
GitHub Secret Scanning plans
- GitHub Secret Protection$19 a month
Pick GitHub CodeQL if…
CodeQL is for developers and security teams who want query-based code analysis in an IDE, CLI, or CI workflow. Its availability depends on supported languages, operating systems, and repository eligibility.
Pick GitHub Secret Scanning if…
It suits teams that need to find exposed credentials in GitHub repositories and related content. Public-repository scanning is available free, while organization-owned private and internal repositories require GitHub Secret Protection on a supported plan.