Introducing mrva, a terminal-first approach to CodeQL multi-repo variant analysis

Published

2025-12-11 12:00

Collected

2026-07-03 03:28

---
id: 1314
title: "Introducing mrva, a terminal-first approach to CodeQL multi-repo variant analysis"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2025/12/11/introducing-mrva-a-terminal-first-approach-to-codeql-multi-repo-variant-analysis/"
published_at: "2025-12-11 12:00"
tags: ["appsec", "vulnerability-research", "security-research", "static-analysis", "tool-release", "codeql", "variant-analysis", "terminal"]
phying_url: "https://phying.com/item/1314"
lang: en
---

# Introducing mrva, a terminal-first approach to CodeQL multi-repo variant analysis

## Summary

mrva is a terminal-first tool for CodeQL multi-repository variant analysis: it downloads pre-built databases via the GitHub API, runs custom queries locally, and prints SARIF results to stdout.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2025-12-11 12:00
- **Original:** https://blog.trailofbits.com/2025/12/11/introducing-mrva-a-terminal-first-approach-to-codeql-multi-repo-variant-analysis/
- **Phying News:** https://phying.com/item/1314