codeql

Collection of community-driven CodeQL query, library and extension packs

Repo Laboratório de Experimentação de Software

A monorepo filtering workaround for GitHub Advanced Security Code Scanning using renaming of the scanning tool in an Actions workflow

Full-stack contact, task, and appointment suite (Spring Boot 4.0.0 + React UI) with strict validation, defensive copies, JWT auth, JUnit 5 + AssertJ, JaCoCo and PITest, and multi-OS CI (Ubuntu and Windows on JDK 17/21) running SpotBugs, OWASP Dependency-Check, CodeQL, and ZAP, with the legacy service kept on the original-cs320 branch.

Examples of vulnerable code that can be detected by CodeQL queries.

🔐 Secure Spring Boot app using GitHub Copilot and GitHub Security tools (CodeQL, secret scanning, Dependabot). Includes Model, Repository, Service, and Controller layers with CI/CD and static analysis.

JetBrains IDE plugin for editing, aligning, sorting, fitting, and converting Markdown pipe tables inside the IDE.

It is a draft structure prepared for Spring Boot projects with JWT and others. Check the Readme for details.

깃허브 액션 연습용 레포지토리

Full-stack application for keeping personal finances under control. It follows the spirit of the traditional kakebo (家計簿, "household ledger"): instead of just tracking numbers, it encourages organizing money into journals and categories so spending becomes intentional and easy to review.

Java reference implementations for algorithms and transaction validation: property-based tests, CI, CodeQL, and static quality gates.

Intelligent GitHub profile analyzer built with Java and Spring Boot.

Maven plugin parsing SARIF files created by CodeQL used for SonarQube issueReporter.

A secure, accessible Spring Boot blog for sharing everyday stories about life, food, travel, and wellbeing.

🇧🇷 [PT-BR] - Jornada para certificação Java OCA 2026

DevSecOps CI/CD pipeline demo — CodeQL, Snyk (SCA + SAST), SBOM generation, and GitOps-style deployment, exercised against an intentionally vulnerable Spring Boot app used as the scan target.

API Spring Boot 3 + Angular 17 para consulta de créditos: Java 21, Kafka, Docker, cobertura 90 %, CI/CD GitHub Actions.

Java 21 event-sourced double-entry ledger engine with PostgreSQL durability, idempotent posting, optimistic concurrency, transactional outbox, and deterministic replay.

REST API built with Java 25 and Spring Boot, featuring authentication, role-based authorization, automated tests, SBOM and security analysis.