Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Code scanning for security vulnerabilities now available

github.blog

Post reply on HN
Print view View original

1–10 of 125 posts

Re: Code scanning for security vulnerabilities now available

#3

Post by hbcondo714 »

CalmStorm wrote: post #2

What programming languages does it support? I couldn’t find out from the press release.

I had to click around a bit from the PR but:

CodeQL code scanning automatically detects code written in the supported languages

   C/C++
   C#
   Go
   Java
   JavaScript/TypeScript
   Python
Source: https://docs.github.com/en/free-pro-team@latest/github/findi...

Re: Code scanning for security vulnerabilities now available

#4

Post by mmusc »

CalmStorm wrote: post #2

What programming languages does it support? I couldn’t find out from the press release.

If I read correctly code scanning is based on CodeQL, and i found this https://help.semmle.com/codeql/supported-languages-and-frame...

So it looks like it supports C/C++/C#/Go/Java/JS/Python/TS

Re: Code scanning for security vulnerabilities now available

#5

Post by sudosysgen »

hbcondo714 wrote: post #3
CalmStorm wrote: post #2

What programming languages does it support? I couldn’t find out from the press release.

I had to click around a bit from the PR but: CodeQL code scanning automatically detects code written in the supported languages C/C++ C# Go Java JavaScript/TypeScript Python Source: https://docs.github.com/en/free-pro-team@latest/github/findi...

That's a pretty good start! I'm happy to see security checking be democratized.

Re: Code scanning for security vulnerabilities now available

#6

Post by DelightOne »

CalmStorm wrote: post #2

What programming languages does it support? I couldn’t find out from the press release.

I'm not sure but from [1]:

> This open-source repository contains the extractor, CodeQL libraries, and queries that power Go support in LGTM and the other CodeQL products that GitHub makes available to its customers worldwide.

[1]: https://github.com/github/codeql-go#go-analysis-support-for-...

Re: Code scanning for security vulnerabilities now available

#8

Post by jhutchings0 »

CalmStorm wrote: post #2

What programming languages does it support? I couldn’t find out from the press release.

Code scanning itself isn't language specific. There are open source and commerical tools for many languages available. CodeQL is GitHub's first party tool, and it supports C, C++, C#, Go, Java, JavaScript, Typescript, and Python.

Re: Code scanning for security vulnerabilities now available

#9

Post by ksec »

hbcondo714 wrote: post #3
CalmStorm wrote: post #2

What programming languages does it support? I couldn’t find out from the press release.

I had to click around a bit from the PR but: CodeQL code scanning automatically detects code written in the supported languages C/C++ C# Go Java JavaScript/TypeScript Python Source: https://docs.github.com/en/free-pro-team@latest/github/findi...

Interesting. Consider that Github uses lots of Ruby but the tool does not support Ruby from the get go.

Re: Code scanning for security vulnerabilities now available

#10

Post by rurounijones »

ksec wrote: post #9
hbcondo714 wrote: post #3

Earlier quoted context omitted.

I had to click around a bit from the PR but: CodeQL code scanning automatically detects code written in the supported languages C/C++ C# Go Java JavaScript/TypeScript Python Source: https://docs.github.com/en/free-pro-team@latest/github/findi...

Interesting. Consider that Github uses lots of Ruby but the tool does not support Ruby from the get go.

I have been noticing that a lot as well on other places. Ruby is no longer a "Default supported" language in many new projects.

OpenTelemtry for example doesn't include Ruby in its initial beta program announcement.

".NET, Java, JavaScript, Python, Go, and Erlang!"

Post reply on HN