LGTM.com sunsets as CodeQL analysis moves fully into GitHub code scanning

Three years after the Semmle team joined GitHub, the standalone LGTM.com service is being phased out. The technology that powered it—the CodeQL analysis engine—has been integrated into GitHub code scanning since 2020, and the platform now covers all of LGTM.com’s key features plus additional functionality. With that migration complete, GitHub has announced a deprecation timeline running from late August through mid-December.

Deprecation timeline

GitHub will roll out the shutdown in stages:

  • End of August 2022: LGTM.com stops accepting new user sign-ups and new repositories for analysis. Existing users can still log in and existing repository analysis continues, but only new commits are processed—historical analysis is discontinued.
  • October 2022: GitHub opens migration assistance for repositories actively using LGTM.com pull request checks. For those repositories, GitHub will create pull requests adding a GitHub Actions workflow that runs code scanning. Once the configuration is merged, scanning runs on the source and on future pull requests, with alerts surfaced on the PR conversation and security tab. Repositories with advanced LGTM.com build or analysis configurations may not be migratable automatically; GitHub will contact those projects directly.
  • End of November 2022: LGTM.com stops fetching new commits and stops analyzing pull requests on GitHub.com. Projects still relying on LGTM.com PR analysis will see reminder messages in the PR comments posted by the service during the weeks before this cutoff.
  • 16 December 2022: LGTM.com shuts down entirely. Code quality badges, the query console (including historical results), documentation, and all LGTM.com APIs go offline.

What to do next

Users who want to migrate to GitHub code scanning should consult the getting started guide for GitHub’s security features. Those who rely heavily on the LGTM.com query console and want early access to equivalent functionality on GitHub can request access by leaving a comment in the relevant GitHub Discussion.

Teams that need to export data from LGTM.com before it is retired can use the service’s existing APIs prior to the shutdown date. Questions and feedback on the deprecation are also welcome in the GitHub Discussion thread.