Rongchai Wang
Jun 14, 2025 00:12
CodeQL 2.22.0, GitHub’s static evaluation software, extends Go protection and introduces assist for Swift 6.1.2, bettering safety scanning capabilities.
GitHub has introduced the discharge of CodeQL model 2.22.0, the most recent iteration of its static evaluation engine designed to bolster code safety by means of complete scanning. CodeQL is an integral element of GitHub’s code scanning framework, figuring out and addressing safety vulnerabilities inside codebases. This replace, as detailed by GitHub, brings important enhancements, significantly for builders working with Go and Swift.
Enhancements for Go
The brand new launch introduces a specialised question for the Go programming language, named go/html-template-escaping-bypass-xss. This question is particularly designed to detect potential cross-site scripting (XSS) vulnerabilities related to the html/template bundle. By doing so, CodeQL enhances its capability to safe Go functions by figuring out dangers that would probably be exploited to execute malicious scripts.
Help for Swift 6.1.2
Along with the enhancements for Go, CodeQL 2.22.0 extends its analytical capabilities to functions developed with Swift 6.1.2. This inclusion aligns with GitHub’s dedication to assist a variety of programming languages, making certain that builders utilizing the most recent Swift model can profit from CodeQL’s strong safety evaluation.
For builders looking for detailed info on the total spectrum of updates and enhancements on this launch, GitHub offers a complete changelog. This doc outlines all modifications, making certain customers can totally leverage the brand new options and optimizations provided by CodeQL 2.22.0.
Deployment and Improve Choices
All new options of CodeQL 2.22.0 are routinely obtainable to GitHub code scanning customers on github.com. Moreover, these enhancements are set to be included within the upcoming GitHub Enterprise Server (GHES) model 3.19. For enterprises working on older GHES variations, GitHub permits handbook upgrades of the CodeQL model, making certain that each one customers can entry the most recent safety instruments no matter their server configuration.
For additional insights, customers are inspired to go to the official GitHub announcement on the GitHub weblog.
Picture supply: Shutterstock
