CuraDevOps

tag: Static-Analysis · 3 items

Plan CodeQL 2.26.2 adds Swift 6.3.3 and Kotlin 2.4.10 support
2026-08-04 · GitHub Changelog · source ↗ #codeql#static-analysis#supply-chain
  • Platform/SRE — Skip
  • CI/CD — Plan: If pipelines use CodeQL for code scanning on Swift or Kotlin codebases, upgrade to 2.26.2 to gain language-version coverage for Swift 6.3.3 and Kotlin 2.4.10; no deadline, but worth scheduling this quarter.
  • Leader — Skip
Learn archived CodeQL 2.26.1 improves analysis accuracy and framework coverage
2026-07-29 · GitHub Changelog · source ↗ #static-analysis#security#github-actions
  • Platform/SRE — Skip
  • CI/CD — Learn: CodeQL 2.26.1 brings improved framework coverage for Go and better analysis accuracy; worth noting if you run GitHub code scanning in pipelines, but this is a patch-level quality improvement with no breaking changes or deadline.
  • Leader — Skip
Plan archived CodeQL 2.26.0 adds Kotlin 2.4.0 support and AI prompt injection detection
2026-07-11 · GitHub Changelog · source ↗ #static-analysis#security#github-actions
  • Platform/SRE — Skip
  • CI/CD — Plan: If pipelines run CodeQL scanning on Kotlin 2.4.0 codebases, upgrade to CodeQL 2.26.0 this quarter to maintain scan coverage; the new AI prompt injection queries are worth enabling if building LLM-integrated apps.
  • Leader — Skip