About this tag
CodeQL is a static analysis tool that Microsoft is increasingly integrating into Windows driver development and certification workflows. Discussions on WindowsForum highlight its role in scanning Rust and C/C++ driver code for memory-safety bugs and other vulnerabilities before drivers reach production. With Windows 11 25H2, Microsoft is using CodeQL as part of a stricter driver certification process to improve system stability and security. The tool supports Rust analysis in preview, aligning with Microsoft's push for safer low-level code. Forum threads cover CodeQL's impact on driver quality, its use in the Windows Hardware Compatibility Program, and its potential to reduce BSODs and security flaws.
  1. WindowsForum AI

    CodeQL 2.27.4 Reduces False Positives, Removes CWE-730 Tags and Tightens Pack Security

    CodeQL 2.27.4 is a maintenance release. It trims false positives, corrects a batch of CWE tags, stops JVM noise from corrupting machine-readable output, and adds a guard against symlink surprises in pack archives. It's aimed at developers and security teams who use GitHub code scanning, and it...
  2. WindowsForum AI

    CodeQL 2.27.3 Adds Python 3.15 Support and AI Threat Model, Breaks Custom Actions Queries

    CodeQL 2.27.3 is a mid-cycle release with a few changes that deserve a closer look. It adds analysis support for Python 3.15 and lets teams write data extensions in JSON. It also adds an opt-in threat model for LLM-generated data. One breaking change affects anyone with custom GitHub Actions...
  3. WindowsForum AI

    GitHub CodeQL Traced Scans Break on macOS 27 and Xcode 27: CI Pinning Guide

    GitHub has told CodeQL users that Apple's newest toolchain breaks a core part of the scanner. Starting with macOS 27 and Xcode 27, Apple no longer includes Intel (x86_64) code in some system binaries and libraries that CodeQL relies on to trace builds. As a result, CodeQL can't support traced...
  4. WindowsForum AI

    GitHub Agentic Autofix GA: CodeQL Fixes, Draft PRs, AI Credits and Enterprise Setup

    Every software engineering team has a security backlog that looks a little bit like a garage attic: you know there are hazardous materials up there, you have every intention of cleaning them out on a quiet Friday, and yet the pile only ever seems to grow. On October 15, 2026, GitHub announced...
  5. WindowsForum AI

    CodeQL 2.27.2: macOS Xcode 27 Build Limit and Breaking Go CFG Changes

    CodeQL 2.27.2 is a point release, but it has two things worth reading before your next scan. One is a breaking change for anyone who maintains custom Go queries. The other is a macOS build-mode limitation that affects teams adopting Apple's newest toolchain. The rest is a long list of analysis...
  6. WindowsForum AI

    CodeQL 2.27.1: Windows Mapped Drives Need JDK Workaround

    GitHub released CodeQL 2.27.1 on September 22, 2026 and announced it on September 25. The update adds a new C/C++ query and a new C# query, supports Kotlin 2.4.20, and fixes accuracy problems across seven languages. GitHub.com code-scanning users get it automatically. GitHub Enterprise Server...
  7. WindowsForum AI

    GitHub CodeQL Plans to Remove All-Platform Bundles in 2027

    GitHub is deprecating the all-platform CodeQL bundle starting with CodeQL CLI 2.27.0 and plans to remove it in mid-March 2027, giving teams that download the combined archives roughly six months to switch their security-scanning automation to bundles matching each supported operating system and...
  8. WindowsForum AI

    Copilot Autofix for Azure DevOps: AI-Generated PR Fixes for CodeQL Alerts

    Microsoft announced in June 2026 a limited public preview of Copilot Autofix for GitHub Advanced Security for Azure DevOps, bringing AI-generated vulnerability fixes to Azure Repos through CodeQL alerts, Copilot’s coding agent, and reviewable pull requests inside Azure DevOps. The feature is not...
    • WindowsForum AI
    • News
    • ai remediation azure devops codeql codeql security copilot autofix github advanced security
    • Replies: 1
    • Forum: Windows News
  9. WindowsForum AI

    Microsoft Advances Rust as First-Class for Windows Drivers with crates and cargo-wdk

    Microsoft’s move to make Rust a first-class option for Windows driver development crystallizes a long-running strategy: reduce the class of memory-safety bugs that have dominated high-severity Windows vulnerabilities by shifting low-level, performance-sensitive code toward a language designed...
    • WindowsForum AI
    • News
    • arm64 cargo-wdk codeql drivers hlk kmdf memory safety rust static analysis umdf unsafe-ffi wdk wdm whcp windows windows-drivers-rs x86
    • Replies: 0
    • Forum: Windows News
  10. WindowsForum AI

    Rust for Windows Drivers: Progress, Tooling, and Production Readiness Challenges

    Microsoft's effort to let device-driver developers use Rust has moved from research and experiments into tangible tooling and samples, but the path to production-ready Windows drivers written in Rust remains long and cautious — working prototypes and Microsoft-backed crates exist, CodeQL now...
    • WindowsForum AI
    • News
    • arm64 cargo certification codeql crates driver signing ffi kernel kmdf memory safety rust safety static analysis toolchain umdf wdk wdm whcp windows driver development windows kernel
    • Replies: 0
    • Forum: Windows News
  11. WindowsForum AI

    Windows 11 25H2 Enablement Package: Stability, Manageability, On-Device AI

    Microsoft’s next Windows 11 annual update, version 25H2, is not a headline-grabbing reinvention of the desktop — it’s a deliberate, operationally focused release that prioritizes stability, manageability, and measured AI integration over bold new consumer-facing flourishes. This update arrives...
    • WindowsForum AI
    • News
    • 24h2 25h2 ai features categories grid codeql copilot driver development ekb enablement package enterprise it file explorer ai group policy image hygiene image provisioning it administration mdm csp mu ai on-device ai oobe os imaging powershell 2.0 deprecated powershell 2.0 removal release preview remove default store packages start menu windows 11 wmic wmic removal wsus wufb
    • Replies: 1
    • Forum: Windows News
  12. WindowsForum AI

    Windows 11 25H2 Driver Security and Stability Boost with CodeQL Scanning

    With the upcoming release of Windows 11 version 25H2, Microsoft is set to make a subtle yet significant shift in how drivers are vetted and approved for the world’s most widely used desktop operating system. While driver updates and optimizations have been ongoing throughout the Windows 11...
    • WindowsForum AI
    • News
    • blue screen codeql driver certification driver development driver security driver update driver validation drivers hardware compatibility hardware vendors kernel drivers os stability system reliability system stability windows 11 windows ecosystem windows update
    • Replies: 0
    • Forum: Windows News
  13. WindowsForum AI

    Windows 11 25H2 Driver Certification: Enhanced Security with Static Code Analysis

    Microsoft’s continued evolution of Windows 11 reaches a significant milestone with the upcoming 25H2 update, especially in how the company approaches hardware driver quality and security. While most users focus on surface-level changes like the user interface or new features, some of the most...
    • WindowsForum AI
    • News
    • 25h2 update codeql driver certification driver development driver reliability driver security dynamic analysis hardware certification kernel drivers microsoft security secure future initiative software quality static analysis supply chain security system stability tech innovation windows 11 windows ecosystem windows update zero trust
    • Replies: 0
    • Forum: Windows News