Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql-action
Public
Notifications
You must be signed in to change notification settings
Fork
490
Star
1.6k
Code
Issues
158
Pull requests
33
Actions
Security and quality
2
Insights
Additional navigation options
Code
Issues
Pull requests
Actions
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql-action
analyze
on
main
User selector
All users
Datepicker
All time
Commit history
Commits on May 14, 2026
Update action specs for new entry points
mbg
committed
f0489ab
View commit details
Copy full SHA for f0489ab
View code at this point
Browse repository at this point
Commits on Oct 29, 2025
Update analyze/action.yml
Show description for 74c8748
mbg
and
esbena
authored
74c8748
View commit details
Copy full SHA for 74c8748
View code at this point
Browse repository at this point
Warn if the `add-snippets` input is used
mbg
committed
4ae68af
View commit details
Copy full SHA for 4ae68af
View code at this point
Browse repository at this point
Commits on Oct 27, 2025
Remove `add-snippets` input
mbg
committed
db47d17
View commit details
Copy full SHA for db47d17
View code at this point
Browse repository at this point
Commits on Oct 24, 2025
Consistently use "post-processing"
mbg
committed
f0452d5
View commit details
Copy full SHA for f0452d5
View code at this point
Browse repository at this point
Commits on Oct 22, 2025
Rename new input to `processed-sarif-path`
mbg
committed
8ff870a
View commit details
Copy full SHA for 8ff870a
View code at this point
Browse repository at this point
Add `post-process-output` input to `analyze` action
mbg
committed
c2bec36
View commit details
Copy full SHA for c2bec36
View code at this point
Browse repository at this point
Commits on Sep 30, 2025
Upgrade Node.js version to 24.
Show description for 7434149
mario-campos
committed
7434149
View commit details
Copy full SHA for 7434149
View code at this point
Browse repository at this point
Commits on Sep 17, 2025
Update ref description in action.ymls to include expected format for uploads
felickz
committed
242ca1c
View commit details
Copy full SHA for 242ca1c
View code at this point
Browse repository at this point
Commits on Aug 8, 2025
Update `cleanup-level` input description
henrymercer
committed
1ae99de
View commit details
Copy full SHA for 1ae99de
View code at this point
Browse repository at this point
Commits on Aug 4, 2025
Deprecate the 'cleanup-level' option
henrymercer
committed
e95a3a9
View commit details
Copy full SHA for e95a3a9
View code at this point
Browse repository at this point
Commits on Sep 13, 2024
Add a warning to not specify a `token` input in most cases.
chrisgavin
committed
86b04fb
View commit details
Copy full SHA for 86b04fb
View code at this point
Browse repository at this point
Use RFC-style requirements.
Show description for 51de6a8
chrisgavin
and
aeisenberg
authored
51de6a8
View commit details
Copy full SHA for 51de6a8
View code at this point
Browse repository at this point
Fix incorrect documentation about the `token` input to the Actions.
chrisgavin
committed
d795ead
View commit details
Copy full SHA for d795ead
View code at this point
Browse repository at this point
Commits on Aug 28, 2024
Use cache-cleanup command line option
Show description for e4525ac
paldepind
committed
e4525ac
View commit details
Copy full SHA for e4525ac
View code at this point
Browse repository at this point
Commits on Aug 21, 2024
Add deprecation message to `add-snippets` input.
Remco Vermeulen
committed
4067cda
View commit details
Copy full SHA for 4067cda
View code at this point
Browse repository at this point
Commits on Feb 8, 2024
Document `action.inputs.token` (#2110)
jsoref
authored
9e39a05
View commit details
Copy full SHA for 9e39a05
View code at this point
Browse repository at this point
Commits on Jan 29, 2024
Clarify that ref inputs are ignored for forks
jsoref
committed
cfefe3a
View commit details
Copy full SHA for cfefe3a
View code at this point
Browse repository at this point
Commits on Dec 13, 2023
remove dedundant single quotes from node version strings
nickfyson
committed
6b5b958
View commit details
Copy full SHA for 6b5b958
View code at this point
Browse repository at this point
Commits on Dec 7, 2023
change to node20 for all actions
nickfyson
committed
d651fbc
View commit details
Copy full SHA for d651fbc
View code at this point
Browse repository at this point
Commits on Jul 25, 2023
Add output for analyze action output path
jsoref
committed
8ab72a0
View commit details
Copy full SHA for 8ab72a0
View code at this point
Browse repository at this point
Commits on Mar 23, 2023
Update `upload` input values and logic (#1598)
Show description for a21bb7f
angelapwen
and
henrymercer
authored
a21bb7f
View commit details
Copy full SHA for a21bb7f
View code at this point
Browse repository at this point
Commits on Nov 29, 2022
Always wait for processing when uploading a failed SARIF file
henrymercer
committed
00a3c45
View commit details
Copy full SHA for 00a3c45
View code at this point
Browse repository at this point
Commits on Nov 25, 2022
Upload failed SARIF files to Code Scanning
henrymercer
committed
5296a76
View commit details
Copy full SHA for 5296a76
View code at this point
Browse repository at this point
Add function for retrieving the "upload" input
henrymercer
committed
3cf2a1b
View commit details
Copy full SHA for 3cf2a1b
View code at this point
Browse repository at this point
Commits on Aug 16, 2022
Add `expect-error` input to force PR check green on expected failure (#1177)
angelapwen
authored
9b7fa3d
View commit details
Copy full SHA for 9b7fa3d
View code at this point
Browse repository at this point
Commits on Aug 2, 2022
Add top level comments, rename cleanup to post
angelapwen
committed
44a27e6
View commit details
Copy full SHA for 44a27e6
View code at this point
Browse repository at this point
Commits on Jul 29, 2022
Move logs, SARIF actions uploads to post: hooks
angelapwen
committed
1016eba
View commit details
Copy full SHA for 1016eba
View code at this point
Browse repository at this point
Commits on Mar 30, 2022
Re-enable waiting for processing by default, using the new API semantics.
chrisgavin
committed
9885f86
View commit details
Copy full SHA for 9885f86
View code at this point
Browse repository at this point
Commits on Mar 28, 2022
Use Node.js v16 in all Actions
henrymercer
committed
3d23aad
View commit details
Copy full SHA for 3d23aad
View code at this point
Browse repository at this point
Commits on Feb 17, 2022
Revert "Use Node.js v16 in all Actions"
Show description for 21c48e7
henrymercer
committed
21c48e7
View commit details
Copy full SHA for 21c48e7
View code at this point
Browse repository at this point
Commits on Feb 8, 2022
Use Node.js v16 in all Actions
Show description for 34c777f
henrymercer
committed
34c777f
View commit details
Copy full SHA for 34c777f
View code at this point
Browse repository at this point
Commits on Feb 1, 2022
Update the description of new inputs
Show description for 6c6b8c3
aeisenberg
committed
6c6b8c3
View commit details
Copy full SHA for 6c6b8c3
View code at this point
Browse repository at this point
Apply documentation suggestions from code review
Show description for 0dd4dbf
cw-alexcroteau
and
aeisenberg
committed
0dd4dbf
View commit details
Copy full SHA for 0dd4dbf
View code at this point
Browse repository at this point
Adds ref and SHA as inputs, and sarif-id as output
cw-alexcroteau
committed
980fd4e
View commit details
Copy full SHA for 980fd4e
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.