Codeql

Name: Codeql
Author: GitHub

by GitHub

Windowsjvm—

Available onDirect DownloadGitHub

Runtime

jvm

Size

634 MB

Architecture

x64

Dependencies

164

13 categories

Security

Basic

Minimal signing

Codeql is a jvm app (—) that uses 164 detected dependencies across 13 categories including Utility, Logging, Serialization. It is code-signed. 634 MB on Windows (x64). Last verified June 2026.

What is Codeql built with?

164 detected dependencies across 13 categories.

Utility

Logging

Serialization

Platform Binding

Parser

Async Runtime

Internationalization

Cryptography

CLI

UI Framework

Database

Compression

Other

143

gson txw2 guava jsoup j2html jrt-fs jsr305 metrics autolink flexmark httpcore jewelcli diffutils humanizer snakeyaml tokenizer commons-io httpclient java8-shim java10-shim maven-model messagepack metrics-jmx metrics-jvm semmle.util checker-qual commons-text jackson-core jericho-html logback-core metrics-core plexus-utils aircompressor commons-codec commons-lang3 failureaccess flexmark-util null-analysis plexus-cipher storage-units antlr4-runtime gradle-wrapper maven-artifact maven-settings commons-logging logback-classic microsoft.build packageurl-java commons-compress jackson-databind jackson-datatype javax.activation listenablefuture nuget.versioning org.eclipse.jgit structuredlogger codeql-java-agent flexmark-util-ast flexmark-util-data flexmark-util-html flexmark-util-misc j2objc-annotations maven-resolver-api maven-resolver-spi plexus-classworlds jackson-annotations lombok-javac-extend maven-model-builder maven-resolver-impl maven-resolver-util flexmark-util-format javax.annotation-api microsoft.bcl.memory plexus-interpolation semmle.autobuild.cpp depgraph-maven-plugin flexmark-ext-autolink flexmark-util-builder flexmark-util-options flexmark-util-visitor jackson-datatype-jdk8 jackson-module-kotlin maven-builder-support naturalsort.extension plexus-sec-dispatcher basic.compilerlog.util flexmark-util-sequence github.com/spf13/cobra istack-commons-runtime maven-settings-builder microsoft.codeanalysis mono.posix.netstandard error_prone_annotations flexmark-ext-definition jackson-dataformat-yaml jackson-datatype-jsr310 maven-resolver-provider maven-resolver-supplier messagepack.annotations org.eclipse.sisu.inject org.eclipse.sisu.plexus semmle.autobuild.csharp semmle.autobuild.shared flexmark-ext-typographic flexmark-util-collection flexmark-util-dependency semmle.extraction.csharp maven-repository-metadata microsoft.build.framework microsoft.net.stringtools owasp-java-html-sanitizer flexmark-html2md-converter maven-resolver-named-locks github.com/json-iterator/go java-buildless-maven-plugin plexus-component-annotations github.com/mattn/go-runewidth github.com/modern-go/reflect2 maven-common-artifact-filters maven-resolver-transport-file maven-resolver-transport-http microsoft.codeanalysis.csharp semmle.extraction.csharp.util flexmark-ext-escaped-character flexmark-ext-gfm-strikethrough github.com/boyter/gocodewalker maven-resolver-connector-basic microsoft.build.utilities.core github.com/agnivade/levenshtein github.com/danwakefield/fnmatch github.com/modern-go/concurrent semmle.extraction.csharp.driver github.com/clipperhouse/uax29/v2 microsoft.codeanalysis.workspaces codeql-extractor-kotlin-embeddable codeql-extractor-kotlin-standalone microsoft.codeanalysis.visualbasic semmle.extraction.csharp.standalone microsoft.codeanalysis.csharp.workspaces microsoft.visualstudio.solutionpersistence semmle.extraction.csharp.dependencyfetching microsoft.codeanalysis.visualbasic.workspaces github-dependency-graph-gradle-plugin-codeql-fork

Dot shows detection confidence; hover a technology for its evidence source. Higher confidence means a stronger extraction signal (e.g. a manifest entry vs. a binary string match).

Analyzed binary

SHA-256 of the exact binary Codeql was analyzed from.

No signal

No signal — this field was not captured in the extraction on record. It is populated on re-extraction, not absent from the app.

Security and privacy

Code signing, notarization, and entitlement analysis for Codeql.

Code Signing

Basic

Signed

Notarized

Hardened Runtime

When was Codeql last updated?

1 tracked releases since June 2026.

Latest: —

June 22, 2026

Last verified June 22, 2026

Get version history, dependency trees, and scores via API