#codeql - Twitter Hashtag

Speaker 25

@rodtrent

1 day ago

Must Learn CodeQL: Chapter 3 https://t.co/esyNPyKGFJ #CodeQL #CodeAsData #CodeSecurity

0

1

283

Speaker 25

@rodtrent

4 days ago

Must Learn CodeQL: Chapter 2 https://t.co/447t2PNpz9 #CodeQL #CodeAsData #CodeSecurity

0

287

AKIRA@🇻🇳オフショア開発のIT会社経営

@akira_ishikawa1

5 days ago

CIが成功しても、必要な言語まで解析できたかは別に確認します。macOS 27・Xcode 27のCodeQL制約と、none方式で生成コードやKotlinが対象から外れる条件を説明します。 https://t.co/dSXjai4uFI #CodeQL #AI駆動開発

0

33

Speaker 25

@rodtrent

6 days ago

Must Learn CodeQL: Chapter 1 https://t.co/LxHjYn8BvZ #CodeQL #CodeAsData #CodeSecurity

0

3

0

1

601

Speaker 25

@rodtrent

9 days ago

Must Learn CodeQL: Why Treating Code as Data Changes Everything https://t.co/i1xw7iJRjO #CodeQL #CodeAsData #CodeSecurity #MustLearnCodeQL

rodtrent's tweet photo. Must Learn CodeQL: Why Treating Code as Data Changes Everything

https://t.co/i1xw7iJRjO

#CodeQL #CodeAsData #CodeSecurity #MustLearnCodeQL https://t.co/c1AFdPomuV

0

4

0

2

500

The AI Signal @theaisignals

about 1 month ago

GitHub wired AI Scan for pull requests to CodeQL default setup, then dropped the requirement. Repos that never configured it now get the scan, same permissions, no new step. #GitHub #CodeQL #DevTools

theaisignals's tweet photo. GitHub wired AI Scan for pull requests to CodeQL default setup, then dropped the requirement. Repos that never configured it now get the scan, same permissions, no new step. #GitHub #CodeQL #DevTools https://t.co/8jfPi6pBCa

1

2

1

0

15

Hugow @hugow_vincent

4 months ago

#ArgoCD + #CodeQL = pre auth RCE

Synacktiv

@Synacktiv

4 months ago

CI/CD pwnage with a pre-auth RCE in #ArgoCD by @hugow_vincent 💥 Discover how a single misconfiguration in a Helm chart can lead to a full cluster compromise sprinkled with some CodeQL shenanigans! 🥷 https://t.co/bNH8rE7uNo

1

81

29

43

9K

0

16

1

4

3K

Paweł Kucia @PawelKucia

5 months ago

CodeQL now supports custom sanitizers and validators using data extensions, enhancing security analysis precision in your code. Strengthen your code scanning workflows and identify issues more accurately with tailor-made models. #CodeQL #Security #GitHub 🔍🛡️ ⬇️

PawelKucia's tweet photo. CodeQL now supports custom sanitizers and validators using data extensions, enhancing security analysis precision in your code. Strengthen your code scanning workflows and identify issues more accurately with tailor-made models. #CodeQL #Security #GitHub 🔍🛡️ ⬇️ https://t.co/5lWjgXmUn0

1

2

0

36

reverseame @reverseame

6 months ago

Vulnhalla: Picking the true vulnerabilities from the CodeQL haystack #Vulnhalla #LLMSecurity #CodeQL #VulnerabilityResearch #FalsePositiveReduction https://t.co/bPd3XrF4Oy

0

11

1

3

721

Andrea

@acolombiadev

10 months ago

Baseline I’d ship with: Dependabot alerts + security updates, then CodeQL scanning. Quick setup + why it matters in Main Branch #9: https://t.co/fAS6cG4gQW #Dependabot #CodeQL #DevSecOps

1

2

0

86

Tweag by Modus Create

@tweagio

about 1 year ago

Second blog post by Clément Hurlin on #CodeQL. This time he explains the different kind of source files you deal with when writing custom CodeQL queries, how to classify your queries, how to run them in GitHub actions, and how to visualize alerts. https://t.co/8d6nfVJIkr

1

3

0

1

435

Jordy Zomer

@pwningsystems

over 1 year ago

Implementing a custom #CodeQL extractor + libs for an unsupported language is pure torture but hey I found some bugs already so I guess it’s worth it

1

14

1

2

1K

Jordy Zomer

@pwningsystems

over 1 year ago

Wrote a MCP server for #CodeQL, tried it out with Cursor and it's quite fun so far! I think the next step would be adding support for query-models. Allowing an LLM to easily add sources/sinks to existing queries could be very promising😁 https://t.co/jLC3go5p2G

1

73

9

42

4K

InfoQ @InfoQ

over 1 year ago

GitHub’s Product Security Engineering team is securing the code behind #GitHub with tools like #CodeQL, detecting and fixing vulnerabilities at scale. Now, they’re sharing their insights to help organizations strengthen their own codebases: https://t.co/PASZBSWGr4 #InfoQ

InfoQ's tweet photo. GitHub’s Product Security Engineering team is securing the code behind #GitHub with tools like #CodeQL, detecting and fixing vulnerabilities at scale.

Now, they’re sharing their insights to help organizations strengthen their own codebases: https://t.co/PASZBSWGr4

#InfoQ https://t.co/gFJ3c4uStW

0

2

0

3

2K

reverseame @reverseame

almost 2 years ago

Finding Bugs in Chrome with CodeQL #ChromeBugs #CodeQL #SecurityFlaws #BugHunting #WebDevelopment https://t.co/q3FwbQmoi9

0

58

10

25

3K

GitHub Security Lab

@GHSecurityLab

almost 2 years ago

🚀 Level up your CodeQL skills! In Part 4 of @BlazingWindSec's "Zero to Hero" series, we dive into @HuggingFace’s Gradio framework—showing how to uncover vulnerabilities with real-world insights. Ready to explore? 🛠️🔍 👉 https://t.co/Qx6EbKaYQ4 #CodeQL #BugBounty #OpenSourceSecurity

0

52

11

13

25K

Fabrizio Balliano @fballiano

almost 2 years ago

Just managed to solve all #CodeQL warnings for @MahoCommerce! The only 4 left are within #prototypejs, which will go away for good as soon as possible #ecommerce #php #magento #openmage #js

fballiano's tweet photo. Just managed to solve all #CodeQL warnings for @MahoCommerce!
The only 4 left are within #prototypejs, which will go away for good as soon as possible

#ecommerce #php #magento #openmage #js https://t.co/zQkLvUxkAe

0

5

2

0

202

CyberArk Labs @CyberarkLabs

almost 2 years ago

🔍@g3rzi uncovered 2 vulnerabilities in #Portainer! 🛡️ Learn how #CodeQL helped identify a blind SSRF and insecure encryption in this popular container management tool. Read the full analysis here: https://t.co/nHlDzfOYDQ

0

8

4

1

482