codeql
A reference skill from GitHub's awesome-copilot collection for setting up CodeQL code scanning on GitHub.
What the skill teaches
A reference skill from GitHub's awesome-copilot collection for setting up CodeQL code scanning on GitHub. It walks an agent through choosing between default and advanced setup, writing a codeql.yml Actions workflow with triggers, a language matrix, build modes and query suites, running the CodeQL CLI locally to create and analyse databases and upload results, reading SARIF output, and fixing common analysis failures, including compiled-language builds and monorepos. Supporting reference files cover CLI commands, workflow options, alert management and troubleshooting. It is guidance only, with no scripts.
Capabilities
- Write a CodeQL code scanning workflow for GitHub Actions
- Run CodeQL CLI analyses and upload results
- Interpret SARIF output
- Troubleshoot failed CodeQL analyses
About
- Publisher
- GitHub
- Tool
- GitHub
Install
The project doesn't document install steps that we could confirm. See the project's own instructions
What's inside
- references/alert-management.md
- references/cli-commands.md
- references/compiled-languages.md
- references/sarif-output.md
- references/troubleshooting.md
- references/workflow-configuration.md
MCP servers and skills can run code on your computer and act on your data. Review the source before installing.
Details
| Fact | Value | Source |
|---|---|---|
| Type | Skill | |
| Tool | GitHub | |
| Publisher | GitHub | source |
| Official status | Officialpublished in GitHub's own awesome-copilot repository and about GitHub code scanning; the collection describes itself as community-created | source |
| Needs an API key or sign-in | Not stated in its documentation | |
| Includes scripts | No | source |
| Platforms | Not stated in its documentation | |
| AI clients | Not stated in its documentation | |
| Licence | MIT | source |
| Pricing | Not stated in its documentation | |
| Activity | Last commit Nov 11, 202641,032 GitHub starsDownload data not available (not on npm or PyPI) | source |
| Links | Repository Website |
Sources
- Skill file (SKILL.md)github.com/github/awesome-copilotNov 10, 2026
- Licence file (LICENSE)github.com/github/awesome-copilot · Backs: LicenceNov 12, 2026
- GitHub repositorygithub.com/github/awesome-copilot · Backs: Official status, Publisher, Activity, LicenceNov 11, 2026
- Folder in the repository (codeql)github.com/github/awesome-copilot · Backs: Includes scriptsNov 10, 2026