CodeQL

CodeQL is a semantic code analysis engine that allows users to query code as if it were data. This enables the discovery of vulnerabilities and bad patterns across entire codebases by writing specific queries. Once a query is developed to find a particular vulnerability, it can be shared to help others eradicate similar issues. CodeQL is primarily aimed at security researchers, developers, and organizations working with open-source projects or conducting academic research. It provides tools like a Visual Studio Code extension for writing and running queries, and the CodeQL CLI for creating databases from codebases. It's particularly useful for identifying variants of known vulnerabilities and ensuring code quality and security.