XNU kernel, Kernel Collection and CodeQL build scripts

Unofficial Dockerfile and scripts for building CodeQL databases for the OpenJDK

Get to know more about the concepts of CodeQL by trying our simple tutorials.

Action to retrofit a CodeQL bundle with additional queries, libraries, and customizations

GH CLI CodeQL Scan Extension

WebKit/JSC CodeQL Databases

DYLD CodeQL build scripts

Scan GitHub Actions workflow files with CodeQL

Enterprise-grade DevSecOps CI/CD Pipeline using GitHub Actions, Docker, Kubernetes, CodeQL, Trivy, Secret Scanning, and Automated Security Testing.

Hands-on study guide for the GH-500: GitHub Advanced Security certification. Covers all 5 exam domains with docs, demos, CodeQL, Dependabot config, and automation scripts.

Reusable GitHub Actions workflows + shared configs (Node+Python): lint/type/test/build baseline, CodeQL/Dependabot templates.

A simple tool to practice Prometheus and Grafana on.

GKE Golden-Path IDP + Backstage portal, all-IaC (GHA + keyless WIF). Pluggable CI — 4 engines (Jenkins · Tekton · GitHub Actions/ARC · Argo Workflows) & secrets (imperative | Secret Manager+ESO); OTel → 4 Grafana backends (Cloud/OSS/Azure/AWS); ArgoCD + Argo Rollouts; Spot CI; Gateway+IAP SSO; HA CNPG + dev tier; Dataplane V2+WireGuard; DevSecOps

Agentic GitHub governance template for AI-assisted repositories.

Demonstration of writing custom CodeQL rules and running them in CI

Static Application Security Testing with Semgrep, CodeQL, and language-specific analyzers

Hardened GitHub Actions pipeline running SAST (Semgrep, CodeQL), SCA (Snyk), secret scanning (TruffleHog), and DAST (OWASP ZAP) with SHA-pinned actions and a trust-preserving scan-gating policy.

Get to know more about the concepts of CodeQL by trying our simple tutorials.

DevSecOps — notes, snippets, configs, and templates for Trivy, Semgrep, Checkov, Grype, TruffleHog, Syft, Cosign, OPA, Falco, and Vault.