Releases: Semmle/lgtm-enterprise
1.30.0
LGTM Enterprise 1.30.0
We're very happy to announce the release of LGTM Enterprise 1.30.0. You can find details of what's new, installation instructions and documentation for this release at help.semmle.com. Please note that use of the LGTM Enterprise application requires a separate license agreement with GitHub.
Debian/Ubuntu
LGTM Enterprise can be installed on one or more Debian or Ubuntu machines using the bundle of DEB files attached to this release. Debian 9, Ubuntu 16.04 and Ubuntu 18.04 are all officially supported.
CentOS/RedHat
LGTM Enterprise can be installed on one or more CentOS or RedHat machines using the bundle of RPM files attached to this release. CentOS 7 (>=7.4) and RedHat Enterprise Linux 7 (>=7.4) are both officially supported.
Additionally, if you are installing LGTM Enterprise on CentOS or RedHat machines without internet access, a bundle of third-party dependencies is also included.
Windows workers
You can run LGTM Enterprise workers on Windows using the Windows worker MSI provided for this release.
Amazon Web Services images
Remember to attach a data disk and configure your security group rules correctly when deploying the AMI image. Detailed instructions can be found in the Installation and Upgrade Guide.
LGTM Enterprise is available as an AMI in the following regions:
- ap-northeast-1:
ami-04d763701fa365f15 - ap-northeast-2:
ami-0edc804da32e1c283 - ap-northeast-3:
ami-0d6ef86d66d94cfc7 - ap-south-1:
ami-0ae8b28a726fc36c6 - ap-southeast-1:
ami-057c31e4349ce490b - ap-southeast-2:
ami-0d380b6ddf071e2d3 - ca-central-1:
ami-0d071d0ca07b06ad5 - eu-central-1:
ami-0cdae908caba83d0e - eu-north-1:
ami-0c2e966251481e648 - eu-west-1:
ami-0eb59ebf08af75d2b - eu-west-2:
ami-00b3b07c68182df4e - eu-west-3:
ami-0c4651f15070cc0da - sa-east-1:
ami-089939318006c9cd8 - us-east-1:
ami-08252e69a7e1fc9b3 - us-east-2:
ami-05e90b1eb037eb3fd - us-west-1:
ami-07d054cc320dc2c1c - us-west-2:
ami-00b51bfb7ddb8571d
Helm (Kubernetes)
LGTM Enterprise can be installed to a Kubernetes cluster using a Helm chart. Some optional tools are also provided to make working with Kubernetes logs easier.
Jira add-on
The LGTM Enterprise Jira add-on is available on the LGTM Enterprise Jira Add-on releases page.
CodeQL for LGTM Enterprise 1.30 users
When using CodeQL to create and analyze databases to use in LGTM Enterprise, it's important that the CodeQL components you use are compatible with your version of LGTM. For the 1.30 release (and future releases), we are making directly compatible CodeQL components available to LGTM Enterprise users.
CodeQL for VS Code
To ensure CodeQL databases downloaded from LGTM Enterprise 1.30 can be analyzed in CodeQL for VS Code, you should you clone the 1.30.0 branch of the starter workspace. Alternatively, you can clone the tag v1.30.0 in the CodeQL and CodeQL for Go repositories, and add them to an existing workspace. For more information see Setting up CodeQL in Visual Studio Code.
CodeQL CLI
To ensure that databases created using the CodeQL CLI can be uploaded to LGTM Enterprise 1.30, download version 2.7.6 of the CLI. Clone the tag v1.30.0 in the CodeQL and CodeQL for Go repositories if you want to include compatible analysis results with the databases you upload to LGTM Enterprise. For more information, see Getting started with the CodeQL CLI and Preparing CodeQL databases to upload to LGTM.
Google Compute Engine Image
LGTM Enterprise is available as a Google Compute Engine Image which can be deployed with Google Deployment Manager. You can use this Google Cloud Shell tutorial for deploying LGTM Enterprise on Google Cloud:
If you wish to deploy the image manually it can be found at:
- Project:
lgtm-enterprise - Image ID:
lgtm-enterprise-1-30-0
Azure Image
LGTM Enterprise is available as an Azure virtual machine image which can be deployed with Azure Resource Manager.
The controller can be deployed by using this template:
Worker groups can be deployed by using this template:
If you wish to deploy the image manually it can be found with the image reference github:lgtm-enterprise:lgtm-enterprise:1.30.0.
Release Notes
- This release primarily contains updates to the CodeQL analysis engine and queries.
1.29.1
LGTM Enterprise 1.29.1
We're very happy to announce the release of LGTM Enterprise 1.29.1. You can find details of what's new, installation instructions and documentation for this release at help.semmle.com. Please note that use of the LGTM Enterprise application requires a separate license agreement with GitHub.
Debian/Ubuntu
LGTM Enterprise can be installed on one or more Debian or Ubuntu machines using the bundle of DEB files attached to this release. Debian 9, Ubuntu 16.04 and Ubuntu 18.04 are all officially supported.
CentOS/RedHat
LGTM Enterprise can be installed on one or more CentOS or RedHat machines using the bundle of RPM files attached to this release. CentOS 7 (>=7.4) and RedHat Enterprise Linux 7 (>=7.4) are both officially supported.
Additionally, if you are installing LGTM Enterprise on CentOS or RedHat machines without internet access, a bundle of third-party dependencies is also included.
Windows workers
You can run LGTM Enterprise workers on Windows using the Windows worker MSI provided for this release.
Amazon Web Services images
Remember to attach a data disk and configure your security group rules correctly when deploying the AMI image. Detailed instructions can be found in the Installation and Upgrade Guide.
LGTM Enterprise is available as an AMI in the following regions:
- ap-northeast-1:
ami-0561739e03d941692 - ap-northeast-2:
ami-07352028bed07b45d - ap-northeast-3:
ami-09d28d530c874a97b - ap-south-1:
ami-0b72eda3a50997ac1 - ap-southeast-1:
ami-007c650a5c9cd60b6 - ap-southeast-2:
ami-08c41f924ea9a6431 - ca-central-1:
ami-034a856e920844e5e - eu-central-1:
ami-0e6a35a2b7ebe937d - eu-north-1:
ami-0112e79af0df796f0 - eu-west-1:
ami-077156679e6628a7f - eu-west-2:
ami-029e91027b9461485 - eu-west-3:
ami-0ab1ee10377fe446b - sa-east-1:
ami-0bfb927d2d41f8331 - us-east-1:
ami-0ee43b1fc1d3d9ab2 - us-east-2:
ami-03e239c246166d4cf - us-west-1:
ami-0b739ceae2199be28 - us-west-2:
ami-067f395ff0e08baaa
Helm (Kubernetes)
LGTM Enterprise can be installed to a Kubernetes cluster using a Helm chart. Some optional tools are also provided to make working with Kubernetes logs easier.
Jira add-on
The LGTM Enterprise Jira add-on is available on the LGTM Enterprise Jira Add-on releases page.
CodeQL for LGTM Enterprise 1.29 users
When using CodeQL to create and analyze databases to use in LGTM Enterprise, it's important that the CodeQL components you use are compatible with your version of LGTM. For the 1.29 release (and future releases), we are making directly compatible CodeQL components available to LGTM Enterprise users.
CodeQL for VS Code
To ensure CodeQL databases downloaded from LGTM Enterprise 1.29 can be analyzed in CodeQL for VS Code, you should you clone the 1.29.1 branch of the starter workspace. Alternatively, you can clone the tag v1.29.1 in the CodeQL and CodeQL for Go repositories, and add them to an existing workspace. For more information see Setting up CodeQL in Visual Studio Code.
CodeQL CLI
To ensure that databases created using the CodeQL CLI can be uploaded to LGTM Enterprise 1.29, download version 2.6.3 of the CLI. Clone the tag v1.29.1 in the CodeQL and CodeQL for Go repositories if you want to include compatible analysis results with the databases you upload to LGTM Enterprise. For more information, see Getting started with the CodeQL CLI and Preparing CodeQL databases to upload to LGTM.
Google Compute Engine Image
LGTM Enterprise is available as a Google Compute Engine Image which can be deployed with Google Deployment Manager. You can use this Google Cloud Shell tutorial for deploying LGTM Enterprise on Google Cloud:
If you wish to deploy the image manually it can be found at:
- Project:
lgtm-enterprise - Image ID:
lgtm-enterprise-1-29-1
Azure Image
LGTM Enterprise is available as an Azure virtual machine image which can be deployed with Azure Resource Manager.
The controller can be deployed by using this template:
Worker groups can be deployed by using this template:
If you wish to deploy the image manually it can be found with the image reference github:lgtm-enterprise:lgtm-enterprise:1.29.1.
Release Notes
- A reflected cross-site scripting vulnerability has been fixed.
- An issue where uploaded snapshots could fail to be unpacked on Windows workers due to long file names has been fixed.
- Support for new versions of RabbitMQ that add default consumer timeout has been added.
1.29.0
LGTM Enterprise 1.29.0
We're very happy to announce the release of LGTM Enterprise 1.29.0. You can find details of what's new, installation instructions and documentation for this release at help.semmle.com. Please note that use of the LGTM Enterprise application requires a separate license agreement with GitHub.
Debian/Ubuntu
LGTM Enterprise can be installed on one or more Debian or Ubuntu machines using the bundle of DEB files attached to this release. Debian 9, Ubuntu 16.04 and Ubuntu 18.04 are all officially supported.
CentOS/RedHat
LGTM Enterprise can be installed on one or more CentOS or RedHat machines using the bundle of RPM files attached to this release. CentOS 7 (>=7.4) and RedHat Enterprise Linux 7 (>=7.4) are both officially supported.
Additionally, if you are installing LGTM Enterprise on CentOS or RedHat machines without internet access, a bundle of third-party dependencies is also included.
Windows workers
You can run LGTM Enterprise workers on Windows using the Windows worker MSI provided for this release.
Amazon Web Services images
Remember to attach a data disk and configure your security group rules correctly when deploying the AMI image. Detailed instructions can be found in the Installation and Upgrade Guide.
LGTM Enterprise is available as an AMI in the following regions:
- ap-northeast-1:
ami-0af694e4673d880f0 - ap-northeast-2:
ami-0ebd7421abdb487e5 - ap-northeast-3:
ami-0e1a1dab19dfc1bba - ap-south-1:
ami-0aee3aa4fcba7a063 - ap-southeast-1:
ami-08975369d079c97ad - ap-southeast-2:
ami-0955cc7366ac25953 - ca-central-1:
ami-0ef09b02de85ee9cb - eu-central-1:
ami-00a485a4e49f818b3 - eu-north-1:
ami-0a162155d9a12153c - eu-west-1:
ami-08dbcdecef45230ef - eu-west-2:
ami-01f5751cfe880ac2b - eu-west-3:
ami-0ce9529baa3fd6d47 - sa-east-1:
ami-074d656924002af54 - us-east-1:
ami-0e922789e128830fb - us-east-2:
ami-0d033e264f43e91d5 - us-west-1:
ami-0d01fe42c01b31b77 - us-west-2:
ami-08733240a4ac33dd7
Helm (Kubernetes)
LGTM Enterprise can be installed to a Kubernetes cluster using a Helm chart. Some optional tools are also provided to make working with Kubernetes logs easier.
Jira add-on
The LGTM Enterprise Jira add-on is available on the LGTM Enterprise Jira Add-on releases page.
CodeQL for LGTM Enterprise 1.29 users
When using CodeQL to create and analyze databases to use in LGTM Enterprise, it's important that the CodeQL components you use are compatible with your version of LGTM. For the 1.29 release (and future releases), we are making directly compatible CodeQL components available to LGTM Enterprise users.
CodeQL for VS Code
To ensure CodeQL databases downloaded from LGTM Enterprise 1.29 can be analyzed in CodeQL for VS Code, you should you clone the 1.29.0 branch of the starter workspace. Alternatively, you can clone the tag v1.29.0 in the CodeQL and CodeQL for Go repositories, and add them to an existing workspace. For more information see Setting up CodeQL in Visual Studio Code.
CodeQL CLI
To ensure that databases created using the CodeQL CLI can be uploaded to LGTM Enterprise 1.29, download version 2.6.3 of the CLI. Clone the tag v1.29.0 in the CodeQL and CodeQL for Go repositories if you want to include compatible analysis results with the databases you upload to LGTM Enterprise. For more information, see Getting started with the CodeQL CLI and Preparing CodeQL databases to upload to LGTM.
Google Compute Engine Image
LGTM Enterprise is available as a Google Compute Engine Image which can be deployed with Google Deployment Manager. You can use this Google Cloud Shell tutorial for deploying LGTM Enterprise on Google Cloud:
If you wish to deploy the image manually it can be found at:
- Project:
lgtm-enterprise - Image ID:
lgtm-enterprise-1-29-0
Azure Image
LGTM Enterprise is available as an Azure virtual machine image which can be deployed with Azure Resource Manager.
The controller can be deployed by using this template:
Worker groups can be deployed by using this template:
If you wish to deploy the image manually it can be found with the image reference github:lgtm-enterprise:lgtm-enterprise:1.29.0.
Release Notes
- The CodeQL analysis engine has been updated.
- The snapshot rebuild schedule has been adjusted to spread system load more evenly across the week.
- Support for Windows Server 2019 workers and Ubuntu 16.04 controllers has been dropped.
1.28.3
LGTM Enterprise 1.28.3
We're very happy to announce the release of LGTM Enterprise 1.28.3. You can find details of what's new, installation instructions and documentation for this release at help.semmle.com. Please note that use of the LGTM Enterprise application requires a separate license agreement with GitHub.
Debian/Ubuntu
LGTM Enterprise can be installed on one or more Debian or Ubuntu machines using the bundle of DEB files attached to this release. Debian 9, Ubuntu 16.04 and Ubuntu 18.04 are all officially supported.
CentOS/RedHat
LGTM Enterprise can be installed on one or more CentOS or RedHat machines using the bundle of RPM files attached to this release. CentOS 7 (>=7.4) and RedHat Enterprise Linux 7 (>=7.4) are both officially supported.
Additionally, if you are installing LGTM Enterprise on CentOS or RedHat machines without internet access, a bundle of third-party dependencies is also included.
Windows workers
You can run LGTM Enterprise workers on Windows using the Windows worker MSI provided for this release.
Amazon Web Services images
Remember to attach a data disk and configure your security group rules correctly when deploying the AMI image. Detailed instructions can be found in the Installation and Upgrade Guide.
LGTM Enterprise is available as an AMI in the following regions:
- ap-northeast-1:
ami-01945375e452c0a11 - ap-northeast-2:
ami-0ca643a58a4a2581e - ap-northeast-3:
ami-09abc243f579bf64b - ap-south-1:
ami-087d31e268ebf6108 - ap-southeast-1:
ami-010a3f9bebf235ef5 - ap-southeast-2:
ami-0ac04f16e3ca4e359 - ca-central-1:
ami-0121a93fbbeadd9b5 - eu-central-1:
ami-0c6d723708f07289d - eu-north-1:
ami-055201e97425d03c1 - eu-west-1:
ami-0942e0587d848edb9 - eu-west-2:
ami-09c9095c8e29647f3 - eu-west-3:
ami-00855347ddc86618d - sa-east-1:
ami-019b34f960cd552b4 - us-east-1:
ami-0f2df29298f3a0774 - us-east-2:
ami-0fdacc854a205e113 - us-west-1:
ami-0e1f2ffd304b7fdc1 - us-west-2:
ami-0d14daeb0a6a4d771
Helm (Kubernetes)
LGTM Enterprise can be installed to a Kubernetes cluster using a Helm chart. Some optional tools are also provided to make working with Kubernetes logs easier.
Jira add-on
The LGTM Enterprise Jira add-on is available on the LGTM Enterprise Jira Add-on releases page.
CodeQL for LGTM Enterprise 1.28 users
When using CodeQL to create and analyze databases to use in LGTM Enterprise, it's important that the CodeQL components you use are compatible with your version of LGTM. For the 1.28 release (and future releases), we are making directly compatible CodeQL components available to LGTM Enterprise users.
CodeQL for VS Code
To ensure CodeQL databases downloaded from LGTM Enterprise 1.28 can be analyzed in CodeQL for VS Code, you should you clone the 1.28.3 branch of the starter workspace. Alternatively, you can clone the tag v1.28.3 in the CodeQL and CodeQL for Go repositories, and add them to an existing workspace. For more information see Setting up CodeQL in Visual Studio Code.
CodeQL CLI
To ensure that databases created using the CodeQL CLI can be uploaded to LGTM Enterprise 1.28, download version 2.5.9 of the CLI. Clone the tag v1.28.3 in the CodeQL and CodeQL for Go repositories if you want to include compatible analysis results with the databases you upload to LGTM Enterprise. For more information, see Getting started with the CodeQL CLI and Preparing CodeQL databases to upload to LGTM.
Google Compute Engine Image
LGTM Enterprise is available as a Google Compute Engine Image which can be deployed with Google Deployment Manager. You can use this Google Cloud Shell tutorial for deploying LGTM Enterprise on Google Cloud:
If you wish to deploy the image manually it can be found at:
- Project:
lgtm-enterprise - Image ID:
lgtm-enterprise-1-28-3
Azure Image
LGTM Enterprise is available as an Azure virtual machine image which can be deployed with Azure Resource Manager.
The controller can be deployed by using this template:
Worker groups can be deployed by using this template:
If you wish to deploy the image manually it can be found with the image reference github:lgtm-enterprise:lgtm-enterprise:1.28.3.
Release Notes
- A reflected cross-site scripting vulnerability has been fixed.
- Support for new versions of RabbitMQ that add default consumer timeout has been added.
1.28.2
LGTM Enterprise 1.28.2
We're very happy to announce the release of LGTM Enterprise 1.28.2. You can find details of what's new, installation instructions and documentation for this release at help.semmle.com. Please note that use of the LGTM Enterprise application requires a separate license agreement with GitHub.
Debian/Ubuntu
LGTM Enterprise can be installed on one or more Debian or Ubuntu machines using the bundle of DEB files attached to this release. Debian 9, Ubuntu 16.04 and Ubuntu 18.04 are all officially supported.
CentOS/RedHat
LGTM Enterprise can be installed on one or more CentOS or RedHat machines using the bundle of RPM files attached to this release. CentOS 7 (>=7.4) and RedHat Enterprise Linux 7 (>=7.4) are both officially supported.
Additionally, if you are installing LGTM Enterprise on CentOS or RedHat machines without internet access, a bundle of third-party dependencies is also included.
Windows workers
You can run LGTM Enterprise workers on Windows using the Windows worker MSI provided for this release.
Amazon Web Services images
Remember to attach a data disk and configure your security group rules correctly when deploying the AMI image. Detailed instructions can be found in the Installation and Upgrade Guide.
LGTM Enterprise is available as an AMI in the following regions:
- ap-northeast-1:
ami-086a5f287f08b9c22 - ap-northeast-2:
ami-00fb802dbec4e1b5c - ap-northeast-3:
ami-02225bb116e3a5948 - ap-south-1:
ami-02a358a03f33de6ea - ap-southeast-1:
ami-0911c7888ff0c7811 - ap-southeast-2:
ami-0164639c2f1e0506b - ca-central-1:
ami-0eca4c6ed8650bca5 - eu-central-1:
ami-086832e08c106f065 - eu-north-1:
ami-043e5f5c71dd933d7 - eu-west-1:
ami-085b9e02e3ac9c21b - eu-west-2:
ami-0e63bea5fddafb9f5 - eu-west-3:
ami-06cab36d5bbda612b - sa-east-1:
ami-042b10307aa0f21e2 - us-east-1:
ami-0ec895ed07c841e9f - us-east-2:
ami-0cdc6916fe6cc3aa8 - us-west-1:
ami-0cccdedaa3341b9e2 - us-west-2:
ami-07a7ce9bb0c6bbbc8
Helm (Kubernetes)
LGTM Enterprise can be installed to a Kubernetes cluster using a Helm chart. Some optional tools are also provided to make working with Kubernetes logs easier.
Jira add-on
The LGTM Enterprise Jira add-on is available on the LGTM Enterprise Jira Add-on releases page.
CodeQL for LGTM Enterprise 1.28 users
When using CodeQL to create and analyze databases to use in LGTM Enterprise, it's important that the CodeQL components you use are compatible with your version of LGTM. For the 1.28 release (and future releases), we are making directly compatible CodeQL components available to LGTM Enterprise users.
CodeQL for VS Code
To ensure CodeQL databases downloaded from LGTM Enterprise 1.28 can be analyzed in CodeQL for VS Code, you should you clone the 1.28.2 branch of the starter workspace. Alternatively, you can clone the tag v1.28.2 in the CodeQL and CodeQL for Go repositories, and add them to an existing workspace. For more information see Setting up CodeQL in Visual Studio Code.
CodeQL CLI
To ensure that databases created using the CodeQL CLI can be uploaded to LGTM Enterprise 1.28, download version 2.5.9 of the CLI. Clone the tag v1.28.2 in the CodeQL and CodeQL for Go repositories if you want to include compatible analysis results with the databases you upload to LGTM Enterprise. For more information, see Getting started with the CodeQL CLI and Preparing CodeQL databases to upload to LGTM.
Google Compute Engine Image
LGTM Enterprise is available as a Google Compute Engine Image which can be deployed with Google Deployment Manager. You can use this Google Cloud Shell tutorial for deploying LGTM Enterprise on Google Cloud:
If you wish to deploy the image manually it can be found at:
- Project:
lgtm-enterprise - Image ID:
lgtm-enterprise-1-28-2
Azure Image
LGTM Enterprise is available as an Azure virtual machine image which can be deployed with Azure Resource Manager.
The controller can be deployed by using this template:
Worker groups can be deployed by using this template:
If you wish to deploy the image manually it can be found with the image reference github:lgtm-enterprise:lgtm-enterprise:1.28.2.
Release Notes
- A version of Log4j included in the bundled copy of Apache Solr that was vulnerable to CVE-2021-45046 has been updated to 2.16.0. This has been done out of an abundance of caution, and at this time, we believe that LGTM users are not at any elevated risk due to CVE-2021-45046 or CVE-2021-45105.
1.28.1
LGTM Enterprise 1.28.1
We're very happy to announce the release of LGTM Enterprise 1.28.1. You can find details of what's new, installation instructions and documentation for this release at help.semmle.com. Please note that use of the LGTM Enterprise application requires a separate license agreement with GitHub.
🔒 This release contains a critical security fix. We recommend updating as soon as possible.
Debian/Ubuntu
LGTM Enterprise can be installed on one or more Debian or Ubuntu machines using the bundle of DEB files attached to this release. Debian 9, Ubuntu 16.04 and Ubuntu 18.04 are all officially supported.
CentOS/RedHat
LGTM Enterprise can be installed on one or more CentOS or RedHat machines using the bundle of RPM files attached to this release. CentOS 7 (>=7.4) and RedHat Enterprise Linux 7 (>=7.4) are both officially supported.
Additionally, if you are installing LGTM Enterprise on CentOS or RedHat machines without internet access, a bundle of third-party dependencies is also included.
Windows workers
You can run LGTM Enterprise workers on Windows using the Windows worker MSI provided for this release.
Amazon Web Services images
Remember to attach a data disk and configure your security group rules correctly when deploying the AMI image. Detailed instructions can be found in the Installation and Upgrade Guide.
LGTM Enterprise is available as an AMI in the following regions:
- ap-northeast-1:
ami-032d42ace4cf5fdef - ap-northeast-2:
ami-0bbad8f0b2d63d6d0 - ap-northeast-3:
ami-0685ad474e1f3c3aa - ap-south-1:
ami-0a68cb771993037f3 - ap-southeast-1:
ami-0c458d5a4d2e0fe7d - ap-southeast-2:
ami-09366398386226daa - ca-central-1:
ami-0686cccf20ffc9ae9 - eu-central-1:
ami-009d37a48bf6cdf80 - eu-north-1:
ami-08806465fa1bd8609 - eu-west-1:
ami-0fffac753c8aede85 - eu-west-2:
ami-0d4f756f40455042d - eu-west-3:
ami-069869eed2b208b36 - sa-east-1:
ami-018953a384a8c617a - us-east-1:
ami-0d387900d716f9b16 - us-east-2:
ami-09cd4b3f9de75fdbb - us-west-1:
ami-03aefa2d90b849811 - us-west-2:
ami-0bf68c8504fa58ded
Helm (Kubernetes)
LGTM Enterprise can be installed to a Kubernetes cluster using a Helm chart. Some optional tools are also provided to make working with Kubernetes logs easier.
Jira add-on
The LGTM Enterprise Jira add-on is available on the LGTM Enterprise Jira Add-on releases page.
CodeQL for LGTM Enterprise 1.28 users
When using CodeQL to create and analyze databases to use in LGTM Enterprise, it's important that the CodeQL components you use are compatible with your version of LGTM. For the 1.28 release (and future releases), we are making directly compatible CodeQL components available to LGTM Enterprise users.
CodeQL for VS Code
To ensure CodeQL databases downloaded from LGTM Enterprise 1.28 can be analyzed in CodeQL for VS Code, you should you clone the 1.28.1 branch of the starter workspace. Alternatively, you can clone the tag v1.28.1 in the CodeQL and CodeQL for Go repositories, and add them to an existing workspace. For more information see Setting up CodeQL in Visual Studio Code.
CodeQL CLI
To ensure that databases created using the CodeQL CLI can be uploaded to LGTM Enterprise 1.28, download version 2.5.9 of the CLI. Clone the tag v1.28.1 in the CodeQL and CodeQL for Go repositories if you want to include compatible analysis results with the databases you upload to LGTM Enterprise. For more information, see Getting started with the CodeQL CLI and Preparing CodeQL databases to upload to LGTM.
Google Compute Engine Image
LGTM Enterprise is available as a Google Compute Engine Image which can be deployed with Google Deployment Manager. You can use this Google Cloud Shell tutorial for deploying LGTM Enterprise on Google Cloud:
If you wish to deploy the image manually it can be found at:
- Project:
lgtm-enterprise - Image ID:
lgtm-enterprise-1-28-1
Azure Image
LGTM Enterprise is available as an Azure virtual machine image which can be deployed with Azure Resource Manager.
The controller can be deployed by using this template:
Worker groups can be deployed by using this template:
If you wish to deploy the image manually it can be found with the image reference github:lgtm-enterprise:lgtm-enterprise:1.28.1.
Release Notes
- A version of Log4j included in the bundled copy of Apache Solr that was vulnerable to CVE-2021-44228 has been updated to 2.15.0.
- A problem with GitLab integration caused by a change in the GitLab API has been resolved.
- A compatibility issue between a bundled configuration file and recent versions of RabbitMQ has been resolved.
1.28.0
LGTM Enterprise 1.28.0
We're very happy to announce the release of LGTM Enterprise 1.28.0. You can find details of what's new, installation instructions and documentation for this release at help.semmle.com. Please note that use of the LGTM Enterprise application requires a separate license agreement with GitHub.
Debian/Ubuntu
LGTM Enterprise can be installed on one or more Debian or Ubuntu machines using the bundle of DEB files attached to this release. Debian 9, Ubuntu 16.04 and Ubuntu 18.04 are all officially supported.
CentOS/RedHat
LGTM Enterprise can be installed on one or more CentOS or RedHat machines using the bundle of RPM files attached to this release. CentOS 7 (>=7.4) and RedHat Enterprise Linux 7 (>=7.4) are both officially supported.
Additionally, if you are installing LGTM Enterprise on CentOS or RedHat machines without internet access, a bundle of third-party dependencies is also included.
Windows workers
You can run LGTM Enterprise workers on Windows using the Windows worker MSI provided for this release.
Amazon Web Services images
Remember to attach a data disk and configure your security group rules correctly when deploying the AMI image. Detailed instructions can be found in the Installation and Upgrade Guide.
LGTM Enterprise is available as an AMI in the following regions:
- ap-northeast-1:
ami-0ba247c21a7508e01 - ap-northeast-2:
ami-035378cf2a2b0b4a6 - ap-northeast-3:
ami-073ba2f48985d71b4 - ap-south-1:
ami-0fe4e5d8e2dfa4fcb - ap-southeast-1:
ami-0d423d2364258a772 - ap-southeast-2:
ami-0380ee3c8196ed4a3 - ca-central-1:
ami-0660be9b88e13b8e9 - eu-central-1:
ami-0f24e007c8b27a418 - eu-north-1:
ami-06fecf6e7cf52c868 - eu-west-1:
ami-07dcd5c1d267ccd21 - eu-west-2:
ami-0b6df1ebd2286c10a - eu-west-3:
ami-0ea3a01ab65cbaf52 - sa-east-1:
ami-07f442773905e636a - us-east-1:
ami-04761413345753b2c - us-east-2:
ami-08cacd49b6ff9ae2e - us-west-1:
ami-0cf22bd577656de0f - us-west-2:
ami-06a502d02b87f3319
Helm (Kubernetes)
LGTM Enterprise can be installed to a Kubernetes cluster using a Helm chart. Some optional tools are also provided to make working with Kubernetes logs easier.
Jira add-on
The LGTM Enterprise Jira add-on is available on the LGTM Enterprise Jira Add-on releases page.
CodeQL for LGTM Enterprise 1.28 users
When using CodeQL to create and analyze databases to use in LGTM Enterprise, it's important that the CodeQL components you use are compatible with your version of LGTM. For the 1.28 release (and future releases), we are making directly compatible CodeQL components available to LGTM Enterprise users.
CodeQL for VS Code
To ensure CodeQL databases downloaded from LGTM Enterprise 1.28 can be analyzed in CodeQL for VS Code, you should you clone the 1.28.0 branch of the starter workspace. Alternatively, you can clone the tag v1.28.0 in the CodeQL and CodeQL for Go repositories, and add them to an existing workspace. For more information see Setting up CodeQL in Visual Studio Code.
CodeQL CLI
To ensure that databases created using the CodeQL CLI can be uploaded to LGTM Enterprise 1.28, download version 2.5.9 of the CLI. Clone the tag v1.28.0 in the CodeQL and CodeQL for Go repositories if you want to include compatible analysis results with the databases you upload to LGTM Enterprise. For more information, see Getting started with the CodeQL CLI and Preparing CodeQL databases to upload to LGTM.
Google Compute Engine Image
LGTM Enterprise is available as a Google Compute Engine Image which can be deployed with Google Deployment Manager. You can use this Google Cloud Shell tutorial for deploying LGTM Enterprise on Google Cloud:
If you wish to deploy the image manually it can be found at:
- Project:
lgtm-enterprise - Image ID:
lgtm-enterprise-1-28-0
Azure Image
LGTM Enterprise is available as an Azure virtual machine image which can be deployed with Azure Resource Manager.
The controller can be deployed by using this template:
Worker groups can be deployed by using this template:
If you wish to deploy the image manually it can be found with the image reference github:lgtm-enterprise:lgtm-enterprise:1.28.0.
Release Notes
- An incompatibility between LGTM's SSL configuration and the latest version of RabbitMQ has been fixed.
- An issue where query console queries running on Windows workers would fail has been fixed.
1.27.3
LGTM Enterprise 1.27.3
We're very happy to announce the release of LGTM Enterprise 1.27.3. You can find details of what's new, installation instructions and documentation for this release at help.semmle.com. Please note that use of the LGTM Enterprise application requires a separate license agreement with GitHub.
Debian/Ubuntu
LGTM Enterprise can be installed on one or more Debian or Ubuntu machines using the bundle of DEB files attached to this release. Debian 9, Ubuntu 16.04 and Ubuntu 18.04 are all officially supported.
CentOS/RedHat
LGTM Enterprise can be installed on one or more CentOS or RedHat machines using the bundle of RPM files attached to this release. CentOS 7 (>=7.4) and RedHat Enterprise Linux 7 (>=7.4) are both officially supported.
Additionally, if you are installing LGTM Enterprise on CentOS or RedHat machines without internet access, a bundle of third-party dependencies is also included.
Windows workers
You can run LGTM Enterprise workers on Windows using the Windows worker MSI provided for this release.
Amazon Web Services images
Remember to attach a data disk and configure your security group rules correctly when deploying the AMI image. Detailed instructions can be found in the Installation and Upgrade Guide.
LGTM Enterprise is available as an AMI in the following regions:
- ap-northeast-1:
ami-097b5fd686fa32fe6 - ap-northeast-2:
ami-0feef0a241ee3e030 - ap-northeast-3:
ami-050ffd1c725e13250 - ap-south-1:
ami-05e77e9df17f7c8c6 - ap-southeast-1:
ami-0a8151720149acb66 - ap-southeast-2:
ami-05ce540bd0dc36e73 - ca-central-1:
ami-0b7730d2ca3310908 - eu-central-1:
ami-0f5cf2778e1eb239d - eu-north-1:
ami-0683756a03cff1ca8 - eu-west-1:
ami-0ecaa3d6a19a83fba - eu-west-2:
ami-057870e958891b934 - eu-west-3:
ami-07f910a855bd805c5 - sa-east-1:
ami-049e84f3ec6ebd6ac - us-east-1:
ami-01096dff30249a652 - us-east-2:
ami-0b646dfe8864bac8d - us-west-1:
ami-000acb34dd6240c66 - us-west-2:
ami-0e0547f1acf74d4fe
Helm (Kubernetes)
LGTM Enterprise can be installed to a Kubernetes cluster using a Helm chart. Some optional tools are also provided to make working with Kubernetes logs easier.
Jira add-on
The LGTM Enterprise Jira add-on is available on the LGTM Enterprise Jira Add-on releases page.
CodeQL for LGTM Enterprise 1.27 users
When using CodeQL to create and analyze databases to use in LGTM Enterprise, it's important that the CodeQL components you use are compatible with your version of LGTM. For the 1.27 release (and future releases), we are making directly compatible CodeQL components available to LGTM Enterprise users.
CodeQL for VS Code
To ensure CodeQL databases downloaded from LGTM Enterprise 1.27 can be analyzed in CodeQL for VS Code, you should you clone the 1.27.3 branch of the starter workspace. Alternatively, you can clone the tag v1.27.3 in the CodeQL and CodeQL for Go repositories, and add them to an existing workspace. For more information see Setting up CodeQL in Visual Studio Code.
CodeQL CLI
To ensure that databases created using the CodeQL CLI can be uploaded to LGTM Enterprise 1.27, download version 2.4.6 of the CLI. Clone the tag v1.27.3 in the CodeQL and CodeQL for Go repositories if you want to include compatible analysis results with the databases you upload to LGTM Enterprise. For more information, see Getting started with the CodeQL CLI and Preparing CodeQL databases to upload to LGTM.
Google Compute Engine Image
LGTM Enterprise is available as a Google Compute Engine Image which can be deployed with Google Deployment Manager. You can use this Google Cloud Shell tutorial for deploying LGTM Enterprise on Google Cloud:
If you wish to deploy the image manually it can be found at:
- Project:
lgtm-enterprise - Image ID:
lgtm-enterprise-1-27-3
Azure Image
LGTM Enterprise is available as an Azure virtual machine image which can be deployed with Azure Resource Manager.
The controller can be deployed by using this template:
Worker groups can be deployed by using this template:
If you wish to deploy the image manually it can be found with the image reference github:lgtm-enterprise:lgtm-enterprise:1.27.3.
Release Notes
- A reflected cross-site scripting vulnerability has been fixed.
- Support for new versions of RabbitMQ that add default consumer timeout has been added.
1.27.2
LGTM Enterprise 1.27.2
We're very happy to announce the release of LGTM Enterprise 1.27.2. You can find details of what's new, installation instructions and documentation for this release at help.semmle.com. Please note that use of the LGTM Enterprise application requires a separate license agreement with GitHub.
Debian/Ubuntu
LGTM Enterprise can be installed on one or more Debian or Ubuntu machines using the bundle of DEB files attached to this release. Debian 9, Ubuntu 16.04 and Ubuntu 18.04 are all officially supported.
CentOS/RedHat
LGTM Enterprise can be installed on one or more CentOS or RedHat machines using the bundle of RPM files attached to this release. CentOS 7 (>=7.4) and RedHat Enterprise Linux 7 (>=7.4) are both officially supported.
Additionally, if you are installing LGTM Enterprise on CentOS or RedHat machines without internet access, a bundle of third-party dependencies is also included.
Windows workers
You can run LGTM Enterprise workers on Windows using the Windows worker MSI provided for this release.
Amazon Web Services images
Remember to attach a data disk and configure your security group rules correctly when deploying the AMI image. Detailed instructions can be found in the Installation and Upgrade Guide.
LGTM Enterprise is available as an AMI in the following regions:
- ap-northeast-1:
ami-0ed5aacba480604b8 - ap-northeast-2:
ami-0564cd99d90797800 - ap-northeast-3:
ami-07947888ec655144a - ap-south-1:
ami-0b8ab288149675622 - ap-southeast-1:
ami-0fb2c18d744fb895a - ap-southeast-2:
ami-0290fb97fad05ceac - ca-central-1:
ami-0773dcbe60c3d0eac - eu-central-1:
ami-09a249664d0d251c6 - eu-north-1:
ami-0e7f2724bdb73bede - eu-west-1:
ami-0413ab462347888c2 - eu-west-2:
ami-0499682442efb3205 - eu-west-3:
ami-080d306551f95c93c - sa-east-1:
ami-0bd40df7f04c20ac3 - us-east-1:
ami-0c87c28c4669ceba0 - us-east-2:
ami-0b4be53abd50f2ed6 - us-west-1:
ami-0c8feae6b176623a2 - us-west-2:
ami-0c2fb318f7cfa3884
Helm (Kubernetes)
LGTM Enterprise can be installed to a Kubernetes cluster using a Helm chart. Some optional tools are also provided to make working with Kubernetes logs easier.
Jira add-on
The LGTM Enterprise Jira add-on is available on the LGTM Enterprise Jira Add-on releases page.
CodeQL for LGTM Enterprise 1.27 users
When using CodeQL to create and analyze databases to use in LGTM Enterprise, it's important that the CodeQL components you use are compatible with your version of LGTM. For the 1.27 release (and future releases), we are making directly compatible CodeQL components available to LGTM Enterprise users.
CodeQL for VS Code
To ensure CodeQL databases downloaded from LGTM Enterprise 1.27 can be analyzed in CodeQL for VS Code, you should you clone the 1.27.2 branch of the starter workspace. Alternatively, you can clone the tag v1.27.2 in the CodeQL and CodeQL for Go repositories, and add them to an existing workspace. For more information see Setting up CodeQL in Visual Studio Code.
CodeQL CLI
To ensure that databases created using the CodeQL CLI can be uploaded to LGTM Enterprise 1.27, download version 2.4.6 of the CLI. Clone the tag v1.27.2 in the CodeQL and CodeQL for Go repositories if you want to include compatible analysis results with the databases you upload to LGTM Enterprise. For more information, see Getting started with the CodeQL CLI and Preparing CodeQL databases to upload to LGTM.
Google Compute Engine Image
LGTM Enterprise is available as a Google Compute Engine Image which can be deployed with Google Deployment Manager. You can use this Google Cloud Shell tutorial for deploying LGTM Enterprise on Google Cloud:
If you wish to deploy the image manually it can be found at:
- Project:
lgtm-enterprise - Image ID:
lgtm-enterprise-1-27-2
Azure Image
LGTM Enterprise is available as an Azure virtual machine image which can be deployed with Azure Resource Manager.
The controller can be deployed by using this template:
Worker groups can be deployed by using this template:
If you wish to deploy the image manually it can be found with the image reference github:lgtm-enterprise:lgtm-enterprise:1.27.2.
Release Notes
- A version of Log4j included in the bundled copy of Apache Solr that was vulnerable to CVE-2021-45046 has been updated to 2.16.0. This has been done out of an abundance of caution, and at this time, we believe that LGTM users are not at any elevated risk due to CVE-2021-45046 or CVE-2021-45105.
1.27.1
LGTM Enterprise 1.27.1
We're very happy to announce the release of LGTM Enterprise 1.27.1. You can find details of what's new, installation instructions and documentation for this release at help.semmle.com. Please note that use of the LGTM Enterprise application requires a separate license agreement with GitHub.
🔒 This release contains a critical security fix. We recommend updating as soon as possible.
Debian/Ubuntu
LGTM Enterprise can be installed on one or more Debian or Ubuntu machines using the bundle of DEB files attached to this release. Debian 9, Ubuntu 16.04 and Ubuntu 18.04 are all officially supported.
CentOS/RedHat
LGTM Enterprise can be installed on one or more CentOS or RedHat machines using the bundle of RPM files attached to this release. CentOS 7 (>=7.4) and RedHat Enterprise Linux 7 (>=7.4) are both officially supported.
Additionally, if you are installing LGTM Enterprise on CentOS or RedHat machines without internet access, a bundle of third-party dependencies is also included.
Windows workers
You can run LGTM Enterprise workers on Windows using the Windows worker MSI provided for this release.
Amazon Web Services images
Remember to attach a data disk and configure your security group rules correctly when deploying the AMI image. Detailed instructions can be found in the Installation and Upgrade Guide.
LGTM Enterprise is available as an AMI in the following regions:
- ap-northeast-1:
ami-0d0e88c6f228ff271 - ap-northeast-2:
ami-060c07707fa4c22c3 - ap-northeast-3:
ami-0b52a72cc115a0124 - ap-south-1:
ami-0a4a6bfcf8db532a9 - ap-southeast-1:
ami-08ab01825c9145490 - ap-southeast-2:
ami-04901564fe114fd6a - ca-central-1:
ami-02af7a335ad90ea01 - eu-central-1:
ami-080d1c69b757f65ef - eu-north-1:
ami-03c096919500a67da - eu-west-1:
ami-069efa08026fdb0fd - eu-west-2:
ami-0bdd17a8d73531288 - eu-west-3:
ami-0f5ba936d7f8487b4 - sa-east-1:
ami-024039e4b922c7df7 - us-east-1:
ami-0d0fdff0008086146 - us-east-2:
ami-019a920a981f4cf43 - us-west-1:
ami-059f1ed2fb3e6b7aa - us-west-2:
ami-04b8de881c03b2c7e
Helm (Kubernetes)
LGTM Enterprise can be installed to a Kubernetes cluster using a Helm chart. Some optional tools are also provided to make working with Kubernetes logs easier.
Jira add-on
The LGTM Enterprise Jira add-on is available on the LGTM Enterprise Jira Add-on releases page.
CodeQL for LGTM Enterprise 1.27 users
When using CodeQL to create and analyze databases to use in LGTM Enterprise, it's important that the CodeQL components you use are compatible with your version of LGTM. For the 1.27 release (and future releases), we are making directly compatible CodeQL components available to LGTM Enterprise users.
CodeQL for VS Code
To ensure CodeQL databases downloaded from LGTM Enterprise 1.27 can be analyzed in CodeQL for VS Code, you should you clone the 1.27.1 branch of the starter workspace. Alternatively, you can clone the tag v1.27.1 in the CodeQL and CodeQL for Go repositories, and add them to an existing workspace. For more information see Setting up CodeQL in Visual Studio Code.
CodeQL CLI
To ensure that databases created using the CodeQL CLI can be uploaded to LGTM Enterprise 1.27, download version 2.4.6 of the CLI. Clone the tag v1.27.1 in the CodeQL and CodeQL for Go repositories if you want to include compatible analysis results with the databases you upload to LGTM Enterprise. For more information, see Getting started with the CodeQL CLI and Preparing CodeQL databases to upload to LGTM.
Google Compute Engine Image
LGTM Enterprise is available as a Google Compute Engine Image which can be deployed with Google Deployment Manager. You can use this Google Cloud Shell tutorial for deploying LGTM Enterprise on Google Cloud:
If you wish to deploy the image manually it can be found at:
- Project:
lgtm-enterprise - Image ID:
lgtm-enterprise-1-27-1
Azure Image
LGTM Enterprise is available as an Azure virtual machine image which can be deployed with Azure Resource Manager.
The controller can be deployed by using this template:
Worker groups can be deployed by using this template:
If you wish to deploy the image manually it can be found with the image reference github:lgtm-enterprise:lgtm-enterprise:1.27.1.
Release Notes
- A version of Log4j included in the bundled copy of Apache Solr that was vulnerable to CVE-2021-44228 has been updated to 2.15.0.
- A compatibility issue between a bundled configuration file and recent versions of RabbitMQ has been resolved.