codeql

Collection of community-driven CodeQL query, library and extension packs

Repo Laboratório de Experimentação de Software

A monorepo filtering workaround for GitHub Advanced Security Code Scanning using renaming of the scanning tool in an Actions workflow

Examples of vulnerable code that can be detected by CodeQL queries.

Full-stack contact, task, and appointment suite (Spring Boot 4.0.0 + React UI) with strict validation, defensive copies, JWT auth, JUnit 5 + AssertJ, JaCoCo and PITest, and multi-OS CI (Ubuntu and Windows on JDK 17/21) running SpotBugs, OWASP Dependency-Check, CodeQL, and ZAP, with the legacy service kept on the original-cs320 branch.

🔐 Secure Spring Boot app using GitHub Copilot and GitHub Security tools (CodeQL, secret scanning, Dependabot). Includes Model, Repository, Service, and Controller layers with CI/CD and static analysis.

It is a draft structure prepared for Spring Boot projects with JWT and others. Check the Readme for details.

JetBrains IDE plugin for editing, aligning, sorting, fitting, and converting Markdown pipe tables inside the IDE.

깃허브 액션 연습용 레포지토리

Intelligent GitHub profile analyzer built with Java and Spring Boot.

Java reference implementations for algorithms and transaction validation: property-based tests, CI, CodeQL, and static quality gates.

Full-stack application for keeping personal finances under control. It follows the spirit of the traditional kakebo (家計簿, "household ledger"): instead of just tracking numbers, it encourages organizing money into journals and categories so spending becomes intentional and easy to review.

Maven plugin parsing SARIF files created by CodeQL used for SonarQube issueReporter.

🇧🇷 [PT-BR] - Jornada para certificação Java OCA 2026

A secure, accessible Spring Boot blog for sharing everyday stories about life, food, travel, and wellbeing.

DevSecOps CI/CD pipeline demo — CodeQL, Snyk (SCA + SAST), SBOM generation, and GitOps-style deployment, exercised against an intentionally vulnerable Spring Boot app used as the scan target.

Gradle CI reference: build, artifact, release, dependency-submission and CodeQL workflows with REUSE-compliant license headers

API Spring Boot 3 + Angular 17 para consulta de créditos: Java 21, Kafka, Docker, cobertura 90 %, CI/CD GitHub Actions.

Java 21 event-sourced double-entry ledger engine with PostgreSQL durability, idempotent posting, optimistic concurrency, transactional outbox, and deterministic replay.