CodeQL

CodeQL is GitHub's industry-leading semantic analysis engine that lets you query code as data to find and eliminate security vulnerabilities.

CodeQL treats your codebase as a relational database, converting source code into a queryable format to uncover deep-seated security vulnerabilities. By writing queries in QL (an object-oriented, logic-based language), security teams can perform complex variant analysis: finding a single bug, writing a query to model its behavior, and instantly scanning thousands of repositories to eradicate every variation of that flaw. It integrates directly into GitHub Advanced Security pipelines, automates checks during pull requests, and supports major languages including C++, Java, Go, Python, and JavaScript.

https://codeql.github.com/