GitHub CodeQL
7.5#1 in git gui clientsFrom $30 a monthFree planWebExtensionLinuxmacOS
VisitGitHub CodeQL vs Microsoft DevSkim
Microsoft DevSkim
6.4#11 in static application security testing softwareFree planFree planAPIExtensionLinuxmacOS
VisitWhat both publish
| Fact | GitHub CodeQL | Microsoft DevSkim |
|---|---|---|
| Free plan | Yes | Yes |
| Purpose | CodeQL is a language and toolchain for code analysis that treats code as data. | DevSkim provides IDE plugins, language analyzers, and rules for security linting and static source-code analysis. |
GitHub CodeQL plans
- Free for research and open sourceFree
- CodeQL for open source and researchFree
- GitHub Code Security$30 a month
- GitHub Free with CodeQL code scanning—
Microsoft DevSkim plans
- DevSkimFree
Pick GitHub CodeQL if…
CodeQL is for developers and security teams who want query-based code analysis in an IDE, CLI, or CI workflow. Its availability depends on supported languages, operating systems, and repository eligibility.
Pick Microsoft DevSkim if…
DevSkim suits developers and teams who want source-code security analysis in IDEs, command-line workflows, or other tools. Its custom rules and library may be useful where teams need to adapt or embed analysis.