CodeQL for Visual Studio Code
CodeQL for Visual Studio Code: A free VS Code extension for building and analyzing CodeQL queries. Ranked #18 of 21 in IDE Code Security Plugins by our editors (7.5/10); pricing: Free plan; best for codeQL specialists building custom security queries.
At a glance
- Editor score7.5 / 10
- PricingFree plan
- Best forCodeQL specialists building custom security queries
- Free planYes
- Paid fromFree
- IDE coverageSingle
- Facts checked26 Sep 2026
Where it wins
- Write and test custom queries, libraries, and query packs in VS Code
- Inspect data-flow paths and run queries against CodeQL databases
- Run variant analysis across multiple repositories
Where it doesn't
- Works in Visual Studio Code rather than across multiple IDEs
- The extension supports CodeQL/QL, a single language
- Some private or organization-owned repositories may require GitHub Code Security licensing
Our verdict on CodeQL for Visual Studio Code
CodeQL for Visual Studio Code is GitHub’s editor extension for developers who write, run, and test CodeQL queries against databases. It is aimed at CodeQL specialists building custom security queries, rather than developers seeking general code-quality checks or fixes inside the editor. The extension is free, open source, and available for Visual Studio Code on Windows, macOS, and Linux. Its focus is the CodeQL/QL language, with query and library authoring supported by IntelliSense, autocomplete, and Go To Definition.
The main draw is the query workflow. Users can run queries against one or more CodeQL databases, inspect data-flow paths in results, and browse and run queries from the open-source CodeQL security query repository. The extension also supports creating and editing query, library, and model packs, running unit tests for queries, and viewing variant analysis across multiple repositories. Those tools make it suited to teams that need to develop and validate CodeQL queries, though its single-language and single-IDE scope is a poor fit for broader multi-language security work or teams using another editor.
The extension connects with the CodeQL CLI and GitHub repositories, while access to CodeQL capabilities depends on repository type and GitHub Code Security licensing. Although the extension itself is free and MIT-licensed, according to the vendor, use with certain private or organization-owned repositories may require a Code Security license. Published support is through documentation. Choose it if your work centers on authoring CodeQL queries in VS Code and you can meet any applicable licensing requirements; consider another tool if you need broader language coverage, in-editor fixes, or support beyond documentation.
Your product? Our editors can test CodeQL for Visual Studio Code in depth and publish a review, labelled as paid · from $149/mo →
CodeQL for Visual Studio Code pricing
CodeQL for Visual Studio Code fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Free |
| IDE coverage | Single |
| Security analysis | Yes |
| Taint analysis | Yes |
| Code quality checks | No |
| In-IDE fixes | No |
| Languages supported | 1 |
| Deployment | Desktop |
| Platforms | Windows, macOS, Linux |
| Support | Docs |
| Built for | Solo, Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 3 integrations: Visual Studio Code, CodeQL CLI, GitHub repositories |
| Pricing | Free plan |
| Website | github.com |
| Facts checked | 26 Sep 2026 |
CodeQL for Visual Studio Code integrations
CodeQL for Visual Studio Code lists 3 integrations on its own site.
- Visual Studio Code
- CodeQL CLI
- GitHub repositories
Alternatives to CodeQL for Visual Studio Code
- Snyk IDE PluginsReal-time code, dependency, and IaC scanning across popular IDEs, with inline remediation.9.3
- QodanaQodana combines code quality checks and security analysis across IDEs and CI pipelines.9.1
- KlocworkDeep source-code analysis for teams that need IDE checks and CI/CD gates.9.0
See all CodeQL for Visual Studio Code alternatives →
Used CodeQL for Visual Studio Code? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used CodeQL for Visual Studio Code for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
CodeQL for Visual Studio Code is listed in our IDE Code Security Plugins directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/codeql-for-visual-studio-code/"><img src="https://www.itechguides.com/best/badge/codeql-for-visual-studio-code.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update