Sunsetting the GitHub CodeQL Bug Bounty Program

[nanzggits]

We are phasing out the GitHub CodeQL Bug Bounty Program.

The primary objective of the GitHub CodeQL Bug Bounty Program was to gather security experts, software developers, and technology enthusiasts to identify and fix vulnerabilities in open source software by creating CodeQL queries that could uncover potential weaknesses and patterns.

All thanks go to you, the dedicated individuals, who, through more than 250 submissions, have contributed to making open source more secure. Many of these queries are actively running and protecting open source projects at scale.

As we sunset the CodeQL Bug Bounty Program, our commitment to open source security remains steadfast. Therefore, we continue to invest in other programs, such as the Internet Bug Bounty program, a crowdfunded bug bounty program that rewards security researchers and maintainers for uncovering and remediating vulnerabilities in the open-source software that supports the internet.

Final Submission Deadline

We want to give all members enough time to submit their ongoing work, so the program will remain open until June 24, 2024, making room for anyone who still wants a chance at earning their stripes (and prizes) with their contributions.

We want to extend a big thank you to all of the incredible individuals who participated in our GitHub CodeQL Bug Bounty Program! Your dedication and determination to achieve excellence resulted in something truly remarkable—here's to making a positive impact on open source software!

The GitHub Security Lab ❤️