Heads-up if you run GitHub code scanning on Macs. Apple stripped Intel (x86_64) code from some system binaries and libraries in macOS 27 and Xcode 27, and CodeQL relies on those to trace builds.
What breaks
- Xcode 27 installed: no traced extraction for C/C++, C#, Go, Java, Kotlin or Swift.
- macOS 27: traced extraction may not be available for those languages.
- Swift 6.4: not supported on any platform.
- Intel Macs: CodeQL support is deprecated in mid-December 2026.
What to do
- Pin workflows to macOS 26 or earlier and Xcode 26 or earlier if you scan Swift or use traced builds.
- In GitHub Actions, pin the runner image and toolchain instead of using latest.
- For C/C++, C# and Java, switch to build mode
none, which doesn’t need tracing.
My take
This is the Apple Silicon transition finishing its job, but security tooling shouldn’t break silently. Check your scans before a runner image update makes them quietly stop.
