Compare software

CodeQL vs gosec: catalog facts
CodeQL	gosec
Freemium Free for research and open source code; other use falls under GitHub's CodeQL terms.	Free Free and open source under the Apache 2.0 licence.
Command line	Windows, macOS, Linux, Command line
Queries follow data flow from source to sink across a codebase Finds every variant of a known bug pattern	Static analysis aimed specifically at Go code Available as a GitHub Action for CI
Free use is limited to research and open source code Writing custom queries means learning the QL language	Only analyses Go code Static analysis can report false positives
Downloadable app	Downloadable app
Closed source	Open source
License: GitHub CodeQL Terms and Conditions	License: Apache-2.0
Not stated if an account is needed	No account needed
Not stated if it works offline	Works offline
Official website Full listing and sources Checked September 24, 2026	Official website Full listing and sources Checked October 2, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.