tree-sitter grammar for the CodeQL language

Generate CodeQL taint-tracking models for Go (along with tests) in a graphical UI

A vulnerable node express server

Detecting prototype pollution vulnerabilities in JavaScript using static analysis

Focus SAST scans (with CodeQL) on just the changed parts of your monorepo, split up as you define

React application developed for the Hybrid mobile applications class.

GitHub native DevSecOps CI/CD best practices include automated security testing, code analysis, and policy enforcement using GitHub Actions, coupled with secure IaC and container security measures. This entails managing secrets, enforcing access control, and implementing incident response and monitoring, all while fostering continuous learning.

F1App is a web application built with React that provides information about the current Formula 1 season. It allows users to view the race schedule, countdown to upcoming races, and see key race results.

DISM Final Year Project, Security Software Tool Development, CodeQL Scanner

A POC of how to run parallel code scanning a monorepo.

Template for quick project creation

Testing CodeQL SQL injection queries

All test files for CodeQL queries along with the CodeQL database.

Generate comma-delimited (CSV) files for security reporting from SARIF output

Scripts to pack codeql

Application boilerplate for React and Redux, implemented in Javascript.