Compare software

CodeQLSonarScanner CLI
Freemium

Free for research and open source code; other use falls under GitHub's CodeQL terms.

 Free

The scanner is free and open source; the SonarQube server or cloud it reports to has its…

Command line Windows, macOS, Linux, Command line
  • Queries follow data flow from source to sink across a codebase
  • Finds every variant of a known bug pattern
  • Works with any project when no build-specific scanner applies
  • Designed for CI/CD pipelines
  • Free use is limited to research and open source code
  • Writing custom queries means learning the QL language
  • Requires a SonarQube Server or SonarQube Cloud instance
  • Results are viewed in SonarQube, not in the scanner
Downloadable app Downloadable app
Closed source Open source
License: GitHub CodeQL Terms and Conditions License: LGPL-3.0-or-later
Not stated if an account is needed Not stated if an account is needed
Not stated if it works offline Needs internet

Checked September 24, 2026

Checked October 1, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.