codeql

O que a skill ensina

A reference skill from GitHub's awesome-copilot collection for setting up CodeQL code scanning on GitHub. It walks an agent through choosing between default and advanced setup, writing a codeql.yml Actions workflow with triggers, a language matrix, build modes and query suites, running the CodeQL CLI locally to create and analyse databases and upload results, reading SARIF output, and fixing common analysis failures, including compiled-language builds and monorepos. Supporting reference files cover CLI commands, workflow options, alert management and troubleshooting. It is guidance only, with no scripts.

O que faz

Detalhes