This is the main git repository of GitHub Security Lab. We use it for these main purposes:
- We use issues on this repo to track CodeQL bounty requests.
- We use it for publishing some of our proof-of-concept exploits (after the vulnerability has been fixed). These PoCs can be found in the SecurityExploits sub-directory.
- Examples of CodeQL queries, which can be found in the CodeQL_Queries sub-directory.
- Java
- C/C++
- Javascript
- C#
- GitHub Actions:
- Conference talks/workshops:
- CodeQL demos from the Semmle days (short Youtube videos):
- Editor plugins
- Visual Studio Code (Official)
- Neovim