Zum Inhalt springen
Kitbay
Einreichen

codeql

MITAktualisiert am 11. Nov. 202641.032GitHub-Sterne

A reference skill from GitHub's awesome-copilot collection for setting up CodeQL code scanning on GitHub.

Was der Skill vermittelt

A reference skill from GitHub's awesome-copilot collection for setting up CodeQL code scanning on GitHub. It walks an agent through choosing between default and advanced setup, writing a codeql.yml Actions workflow with triggers, a language matrix, build modes and query suites, running the CodeQL CLI locally to create and analyse databases and upload results, reading SARIF output, and fixing common analysis failures, including compiled-language builds and monorepos. Supporting reference files cover CLI commands, workflow options, alert management and troubleshooting. It is guidance only, with no scripts.

Funktionen

  • Write a CodeQL code scanning workflow for GitHub Actions
  • Run CodeQL CLI analyses and upload results
  • Interpret SARIF output
  • Troubleshoot failed CodeQL analyses