GitHub CodeQL
7.5#1 in git gui clientsFrom $30 a monthFree planWebExtensionLinuxmacOS
VisitGitHub CodeQL vs Security Code Scan
Security Code Scan
6.0#18 in sast toolsFree planFree planLinuxSelf-hostedWindows
VisitWhat both publish
| Fact | GitHub CodeQL | Security Code Scan |
|---|---|---|
| Purpose | CodeQL is a language and toolchain for code analysis that treats code as data. | Security Code Scan is a static code analyzer for .NET that detects vulnerability patterns in C# and VB.NET. |
GitHub CodeQL plans
- Free for research and open sourceFree
- CodeQL for open source and researchFree
- GitHub Code Security$30 a month
- GitHub Free with CodeQL code scanning—
Security Code Scan plans
- Security Code ScanFree
Pick GitHub CodeQL if…
CodeQL is for developers and security teams who want query-based code analysis in an IDE, CLI, or CI workflow. Its availability depends on supported languages, operating systems, and repository eligibility.
Pick Security Code Scan if…
Security Code Scan suits .NET developers who want vulnerability-pattern analysis during coding or in CI/CD pipelines. Teams can also tailor taint analysis settings to project needs.