CodeQL 2.27.0 adds support for Linux ARM64
CodeQL's static analysis engine adds native Linux arm64 support, a Rust command-injection query, and wider Java/Kotlin and C# coverage.
GitHub's CodeQL 2.27.0 now runs natively on Linux arm64, with per-platform CLI and bundle downloads available for the platform. The release also adds a new security query and extends framework coverage in several languages.
- Code scanning default setup can now use an organization's private registry configurations to authenticate with container registries or the GitHub API when fetching custom queries or packs, so custom content can come from private Git sources and Docker registries.
- A new Rust query, rust/command-line-injection, detects uncontrolled command lines.
- C# analysis has improved ASP.NET Core MVC controller and action discovery to better match runtime behavior, and adds taint tracking for OData action parameter binding.
- Java/Kotlin analysis adds modeling for the Micronaut framework, covering HTTP controllers, WebSocket endpoints, configuration injection, data access, security annotations, and HTTP client sinks.
- C/C++ SQL injection queries now recognise PostgreSQL libpq functions such as PQexec and PQexecParams as sinks.
GitHub
Where the world builds software — Git hosting, pull requests, issues, Actions CI/CD, and Copilot, free for public and private repos.
View GitHub →