Microsoft: We've open-sourced this tool we used to hunt for code by SolarWinds hackers

Microsoft tapped GitHub's CodeQL to discover whether its source code had been modified in the SolarWinds supply chain attack.