# GitHub Code Security: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 3 judge labels across 2 categories by 2 of 14 models. Page: https://www.gane.ai/index/it/vendors/github-code-security

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Static application security testing](https://www.gane.ai/index/it/developer/static-application-security-testing/index.md) | 0% | 16 | 0% | 2 |
| [Software composition analysis](https://www.gane.ai/index/it/developer/software-composition-analysis/index.md) | 0% | 31 | 0% | 1 |

## What the models said for it

- "best if you're already GitHub-centric... CodeQL supports a defined set of languages, so it may not cover every stack" (GPT-6 Luna, SAST)
- "if you're already GitHub-centric and want dependency alerts and pull-request review" (GPT-6 Luna, SCA)
- "Best Free Enterprise-Grade Option" (GLM 4.7 FlashX, SAST)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-5.4 mini | 0 | 0 | 0 | 0 | 0 |
| Gemini 3.5 Flash | 0 | 0 | 0 | 0 | 0 |
| Perplexity Sonar | 0 | 0 | 0 | 0 | 0 |
| Grok 4.20 | 0 | 0 | 0 | 0 | 0 |
| Mistral Small | 0 | 0 | 0 | 0 | 0 |
| DeepSeek V4 Flash | 0 | 0 | 0 | 0 | 0 |
| Llama 4 Maverick | 0 | 0 | 0 | 0 | 0 |
| Qwen 3.7 Flash | 0 | 0 | 0 | 0 | 0 |
| Kimi K2 | 0 | 0 | 0 | 0 | 0 |
| GLM 4.7 FlashX | 0 | 1 | 0 | 0 | 1 |
| MiniMax M2.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-6 Luna | 0 | 2 | 0 | 0 | 2 |
| Muse Glimmer 30B | 0 | 0 | 0 | 0 | 0 |

## Sources returned with these answers

The sites and pages cited by the answers that named GitHub Code Security, from 14 of the 14 answers that named it (only the models that return a source list).

### Domains cited

- startupstash.com: 6
- dev.to: 5
- docs.github.com: 4 (its own site)
- g2.com: 4
- github.com: 4 (its own site)
- semgrep.dev: 4
- appsecsanta.com: 3
- corgea.com: 3
- il.ly: 3
- snyk.io: 3

### Pages cited

- https://startupstash.com/best-sast-tools: 6
- https://dev.to/rahulxsingh/i-reviewed-32-sast-tools-the-ones-worth-using-283e: 5
- https://corgea.com/learn/best-sast-tools: 3
- https://g2.com/categories/static-application-security-testing-sast/small-business: 3
- https://github.com/security/advanced-security: 3
- https://il.ly/blog/sast-tools: 3
- https://semgrep.dev/pricing: 3
- https://snyk.io/plans: 3

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.