The News, Explained
GitHub’s October 19 notice says CodeQL does not support Swift 6.4 on any platform, and Intel Mac support will be deprecated in mid-December 2026. CodeQL analyzes source code for potentially insecure flows. Source
Analysis that observes a build to extract code information is also affected. Installing Xcode 27 prevents traced extraction for C/C++, C#, Go, Java, Kotlin, and Swift. On macOS 27, traced extraction may be unavailable. GitHub attributes this to changes in the Intel components of system binaries and libraries. Source
For Swift scans or traced builds in other languages, GitHub recommends keeping both macOS and Xcode at version 26 or earlier. In GitHub Actions, it advises pinning the runner image, the environment that executes jobs, and the toolchain, the development tools, rather than following latest versions. Source
For C/C++, C#, and Java, the notice offers none mode, which creates an analysis database without a build. GitHub’s documentation says this excludes generated code. Inaccurate dependency guesses or code generation during a build can reduce accuracy. Java analysis using none skips any Kotlin code and emits a warning. Source Source
Code scanning is available for public GitHub.com repositories and eligible Team or Enterprise organization repositories with GitHub Code Security enabled. The advanced-setup instructions require write access and advanced setup already enabled. Source
OYOPICK’s Take
We would start with the project’s language mix. For Java-and-Kotlin projects or builds that generate code, switching to none changes the analysis coverage. Comparing the code actually analyzed alongside whether the job succeeds makes that trade-off clearer.
Swift 6.4’s cross-platform limitation and the planned Intel Mac deprecation are separate checks. We would review the operating-system and Xcode combination needed for traced scans of supported language versions separately from plans for future language and hardware support.