Skip to content
Kitbay
Submit

codeql

MITUpdated on Nov 11, 202641,032GitHub stars

A reference skill from GitHub's awesome-copilot collection for setting up CodeQL code scanning on GitHub.

What the skill teaches

A reference skill from GitHub's awesome-copilot collection for setting up CodeQL code scanning on GitHub. It walks an agent through choosing between default and advanced setup, writing a codeql.yml Actions workflow with triggers, a language matrix, build modes and query suites, running the CodeQL CLI locally to create and analyse databases and upload results, reading SARIF output, and fixing common analysis failures, including compiled-language builds and monorepos. Supporting reference files cover CLI commands, workflow options, alert management and troubleshooting. It is guidance only, with no scripts.

Capabilities

  • Write a CodeQL code scanning workflow for GitHub Actions
  • Run CodeQL CLI analyses and upload results
  • Interpret SARIF output
  • Troubleshoot failed CodeQL analyses