CodeQL Analysis
90/100
@trailofbitsScans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Triggers on "run codeql", "codeql scan", "codeql analysis", "build codeql database", or "find vulnerabilities with...
Reviewed on v2026-05-16 - latest is v0.3.1. Scores may not reflect the current version.
Review Scores
Security34/35
Maintain.31/35
Usability25/30
Evidence:
high
Reviewed May 27, 2026Newer version available
Reviewed Version
2026-05-16
Latest Version
0.3.1(drift)
Newer version available
The review covers 2026-05-16; the latest version is 0.3.1. Recheck changes before installing.
Scores reflect the version reviewed and may change with updates.
Security Audit - No Flags Reported
Audited May 27, 2026Overview
When to Use
When NOT to Use
Setup
npx cldkit install codeqlTroubleshooting
More by Trail of Bits
- Static Analysis SkillSkill90/100
- Variant AnalysisSkill90/100
- Constant Time AnalysisSkill90/100
- Semgrep AnalysisSkill90/100