Release 2.23.1 (2025-09-23)
New features
-
CodeQL now adds the sources and sinks of path alerts to the
relatedLocations
property of SARIF results if they are not included as the primary location or
within the alert message. This means that path alerts will show on PRs if a
source or sink is added or modified, even for queries that don't follow the
common convention of selecting the sink as the primary location and mentioning
the source in the alert message. -
CodeQL now populates file coverage information for GitHub Actions on
the tool status page for code scanning.
For more information about the changes included in this release, see the CodeQL CLI changelog.
You can download either the codeql-PLATFORM.zip for your platform, or the generic codeql.zip which contains binaries for all supported platforms. Please ignore the additional "source code" downloads below the .zip artifacts.
This release is compatible with the CodeQL language packs from github/codeql@codeql-cli/v2.23.1.