--- title: "#codeql articles | Hashnode" description: "Explore 10 articles tagged #codeql on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/codeql" --- Tag # #codeql 10 posts · 0 followers [Manu Shukla](https://hashnode.com/@mr-manushukla) · [Aug 5](https://hashnode.com/posts/github-code-scanning-across-500-repos-a-2026-rollout-that-avoids-alert-overload/6a737061da7cf94fc5132239) ### [GitHub code scanning across 500 repos: a 2026 rollout that avoids alert overload](https://ecorpit.hashnode.dev/github-code-scanning-across-500-repos-a-2026-rollout-that-avoids-alert-overload?utm_source=hashnode&utm_medium=feed) GitHub code scanning across 500 repos: a 2026 rollout that avoids alert overload Summary. GitHub made github-codeql-config-file generally available on 4 August 2026, a repository property that applies 16 min read · [ecorpit.hashnode.dev](https://ecorpit.hashnode.dev/github-code-scanning-across-500-repos-a-2026-rollout-that-avoids-alert-overload?utm_source=hashnode&utm_medium=feed) [Manu Shukla](https://hashnode.com/@mr-manushukla) · [Jul 26](https://hashnode.com/posts/codeql-2260-flags-ai-prompt-injection-the-2026-code-scanning-setup-guide/6a6659a3412f945de4b20379) ### [CodeQL 2.26.0 flags AI prompt injection: the 2026 code scanning setup guide](https://ecorpit.hashnode.dev/codeql-2260-flags-ai-prompt-injection-the-2026-code-scanning-setup-guide?utm_source=hashnode&utm_medium=feed) CodeQL 2.26.0 flags AI prompt injection: the 2026 code scanning setup guide Summary. On 10 July 2026, GitHub released CodeQL 2.26.0 and added a JavaScript and TypeScript query, js/system-prompt-inject 13 min read · [ecorpit.hashnode.dev](https://ecorpit.hashnode.dev/codeql-2260-flags-ai-prompt-injection-the-2026-code-scanning-setup-guide?utm_source=hashnode&utm_medium=feed) [DevTools Guide](https://hashnode.com/@devtoolsguide) · [Mar 3](https://hashnode.com/posts/static-analysis-beyond-linting-codeql-semgrep-sonarqube-and-snyk-code/69a65673f5839ab8d765d811) ### [Static Analysis Beyond Linting: CodeQL, Semgrep, SonarQube, and Snyk Code](https://devtoolsguide.hashnode.dev/static-analysis-beyond-linting-codeql-semgrep-sonarqube-and-snyk-code?utm_source=hashnode&utm_medium=feed) Static Analysis Beyond Linting: CodeQL, Semgrep, SonarQube, and Snyk Code Linters enforce style. Static analysis finds bugs. The difference matters. ESLint will tell you about unused variables and inconsistent formatting. CodeQL will tell you that us... 8 min read · [devtoolsguide.hashnode.dev](https://devtoolsguide.hashnode.dev/static-analysis-beyond-linting-codeql-semgrep-sonarqube-and-snyk-code?utm_source=hashnode&utm_medium=feed) [nonebie](https://hashnode.com/@hackerGa) · [Sep 16, 2025](https://hashnode.com/posts/codeql-with-csharp/68c9140062b9f3b404b82271) ### [CodeQL with Csharp](https://nonebie.hashnode.dev/codeql-with-csharp?utm_source=hashnode&utm_medium=feed) Trong bài viết trước mình đã nếu ra 2 phương pháp parse database mà CodeQL hỗ trợ. Đó là no build và có command build, Với no build thì tất nhiên là rất dễ dàng nhưng ảnh hưởng tới độ chính xác của các liên kết trong source code codeql database cre... 3 min read · [nonebie.hashnode.dev](https://nonebie.hashnode.dev/codeql-with-csharp?utm_source=hashnode&utm_medium=feed) [nonebie](https://hashnode.com/@hackerGa) · [Sep 13, 2025](https://hashnode.com/posts/codeql-install-a-y/68c5d4c3b5ab374d9f04b709) ### [CodeQL install A-Y](https://nonebie.hashnode.dev/codeql-install-a-y?utm_source=hashnode&utm_medium=feed) Hi mọi người, có thể nhiều bạn đã biết thì CodeQL là công cụ rất hữu ích trong việc phân tích, tìm kiếm lỗ hổng bảo mật và biến thể của mã nguồn. Trong bài viết này mình sẽ demo lại quá trình cài đặt CodeQL trên vscode và sử dụng scan thử Đầu tiê... 2 min read · [nonebie.hashnode.dev](https://nonebie.hashnode.dev/codeql-install-a-y?utm_source=hashnode&utm_medium=feed) [Hare Krishna Rai](https://hashnode.com/@harekrishnarai) · [Jun 21, 2025](https://hashnode.com/posts/introduction-to-static-application-security-testing-sast/68562802d24d00d61d7d1e71) ### [Introduction to Static Application Security Testing (SAST)](https://blog.harekrishnarai.me/introduction-to-static-application-security-testing-sast?utm_source=hashnode&utm_medium=feed) Discover SAST's benefits, challenges, and role in enhancing secure software development from the start 18 min read · [blog.harekrishnarai.me](https://blog.harekrishnarai.me/introduction-to-static-application-security-testing-sast?utm_source=hashnode&utm_medium=feed) [Arshan Dabirsiaghi](https://hashnode.com/@nahsrasec) · [Dec 18, 2023](https://hashnode.com/posts/which-java-expression-languages-should-you-use-if-you-prioritize-security/6580620c30b2bdd341d335da) ### [Which Java Expression Languages should you use if you prioritize security?](https://nahsra.hashnode.dev/which-java-expression-languages-should-you-use-if-you-prioritize-security?utm_source=hashnode&utm_medium=feed) Expression languages are at the root of several high-profile CVEs and are one of the most dangerous components you can integrate into an application. See this post by the incomparable Alvaro Muñoz if you want a taste of how deep the pain can go. Sort... 6 min read · [nahsra.hashnode.dev](https://nahsra.hashnode.dev/which-java-expression-languages-should-you-use-if-you-prioritize-security?utm_source=hashnode&utm_medium=feed)