GitHub CodeQL
7.5#1 in git gui clientsFrom $30 a monthFree planWebExtensionLinuxmacOS
VisitGitHub CodeQL vs Marshal
What both publish
| Fact | GitHub CodeQL | Marshal |
|---|---|---|
| Purpose | CodeQL is a language and toolchain for code analysis that treats code as data. | Marshal scans Maven and Gradle dependencies for behavioral signs of supply-chain attacks and can block risky updates at pull-request time. |
GitHub CodeQL plans
- Free for research and open sourceFree
- CodeQL for open source and researchFree
- GitHub Code Security$30 a month
- GitHub Free with CodeQL code scanning—
Marshal plans
- CLI and GitHub ActionFree
- EnterprisePriced on request
- TeamPriced on request
Pick GitHub CodeQL if…
CodeQL is for developers and security teams who want query-based code analysis in an IDE, CLI, or CI workflow. Its availability depends on supported languages, operating systems, and repository eligibility.
Pick Marshal if…
Marshal suits teams maintaining Maven or Gradle projects that want behavioral checks on dependency updates at pull-request time. It is designed to complement, not replace, CVE scanners.