1.Open-source security testing: the Bug Bounty guide to code analysisblog | 2026-03-17 08:10 | yeswehack.com | Original ↗ | .md | #bug-bounty | #open-source | #fuzzing
2.Introducing mrva, a terminal-first approach to CodeQL multi-repo variant analysisblog | 2025-12-11 12:00 | blog.trailofbits.com | Original ↗ | .md | #appsec | #vulnerability-research | #security-research
3.Taming 2,500 compiler warnings with CodeQL, an OpenVPN2 case studyblog | 2025-09-25 11:00 | blog.trailofbits.com | Original ↗ | .md | #c | #openvpn | #static-analysis
4.Don’t recurse on untrusted inputblog | 2025-02-21 05:00 | blog.trailofbits.com | Original ↗ | .md | #java | #vulnerability-disclosure | #codeql
5.Finding Bugs in Chrome with CodeQLblog | 2024-11-21 00:00 | bughunters.google.com | Original ↗ | .md | #vulnerability-research | #chrome | #static-analysis
6.Offensive Security with Large Language Models (2)research | 2024-09-30 09:00 | theori.io | Original ↗ | .md | #ai-security | #prompt-injection | #offensive-security
7.Streamline your static analysis triage with SARIF Explorerblog | 2024-03-20 13:30 | blog.trailofbits.com | Original ↗ | .md | #triage | #static-analysis | #tool-release
8.Catching OpenSSL misuse using CodeQLblog | 2023-12-22 14:00 | blog.trailofbits.com | Original ↗ | .md | #appsec | #cryptography | #c
9.Say hello to the next chapter of the Testing Handbook!blog | 2023-12-11 13:30 | blog.trailofbits.com | Original ↗ | .md | #ci-cd | #sast | #static-analysis
10.Publishing Trail of Bits’ CodeQL queriesblog | 2023-12-06 13:30 | blog.trailofbits.com | Original ↗ | .md | #cryptography | #c | #go
11.Finding unhandled errors using CodeQLblog | 2022-01-11 12:00 | CVE-2018-1002105 | blog.trailofbits.com | Original ↗ | .md | #vulnerability-research | #kubernetes | #static-analysis
12.Detecting Iterator Invalidation with CodeQLblog | 2020-10-09 12:30 | blog.trailofbits.com | Original ↗ | .md | #vulnerability-research | #vulnerabilities | #static-analysis