github / github/roadmap

CodeQL supports Rust [GA]

Open
#1,156 1 comment 0 reactions 0 assignees View on GitHub
GA GHES 3.20 GitHub Advanced Security (GHAS) Shipped
Dominant language
No language data
Stars
8.9k
Forks
1.8k
PR merge metrics
No merged PRs in 30d

Description

### Value Prop

Rust is becoming a more popular languages and more enterprises are adopting it as an alternative to C/C++. Rust support for CodeQL allows organizations to analyse their proprietary Rust codebases for potential security vulnerabilities.

### Expected Outcome

Users using Rust to build their applications will start seeing files written in Rust included in the list of files scanned by CodeQL. This means that they will potentially see new CodeQL relevant to Rust. This will help find and fix issues from additional code bases and improve the overall security posture of the applications scanned with CodeQL.

Contributor guide

Open the contributing guide

Research direction

Start with the issue's expected outcome: Rust files should be included in CodeQL scans and produce Rust-relevant results. The payload names no implementation files, tests, or entry points, so determine the relevant CodeQL components and define completion around Rust code being scanned and findings being reported.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
devtools, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.