GitHub CodeQL
7.5#1 in git gui clientsFrom $30 a monthFree planWebExtensionLinuxmacOS
VisitGitHub CodeQL vs OpenGrep
OpenGrep
7.3#3 in static application security testing softwareFree planFree planAPILinuxmacOSSelf-hosted
VisitWhat both publish
| Fact | GitHub CodeQL | OpenGrep |
|---|---|---|
| Purpose | CodeQL is a language and toolchain for code analysis that treats code as data. | OpenGrep is an open-source static code analysis engine for finding security issues and searching code patterns. |
GitHub CodeQL plans
- Free for research and open sourceFree
- CodeQL for open source and researchFree
- GitHub Code Security$30 a month
- GitHub Free with CodeQL code scanning—
OpenGrep plans
- OpenGrepFree
Pick GitHub CodeQL if…
CodeQL is for developers and security teams who want query-based code analysis in an IDE, CLI, or CI workflow. Its availability depends on supported languages, operating systems, and repository eligibility.
Pick OpenGrep if…
OpenGrep suits developers and organizations looking for a free static analysis engine they can run in their own environment. Existing Semgrep rule users can apply those rules without changes.