CodeQL is the static analysis engine behind GitHub code scanning, which finds and remediates security issues in your code. We’ve recently released version 2.22.0 of CodeQL. Here’s what’s new and improved in this release.

Go

We’ve added support for a new query for Go, go/html-template-escaping-bypass-xss, which finds potential cross-site scripting vulnerabilities when using the html/template package.

Swift

We’ve updated CodeQL to support analysis of apps built with Swift 6.1.2.

For a full list of changes, check out the complete changelog for version 2.22.0, where you’ll find details on all updates and enhancements.

Every new version of CodeQL is automatically deployed to users of GitHub code scanning on github.com. The new features in CodeQL 2.22.0 will also be included in GitHub Enterprise Server (GHES) version 3.19. If you’re using an older version of GHES, you can manually upgrade your CodeQL version.