Hi, We got a contribution from GitHub Security Lab in https://github.com/apache/solr/pull/1721 to enable CodeQL <https://codeql.github.com/> scanning.
What do you say, are we well covered by our other static analysis tools, or would this bring some additional value? Jan