Skip to content

/ codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security (code scanning), LGTM.com, and LGTM Enterprise
semmle-ql codeql lgtm github-advanced-security github-security-lab
CodeQL C# JavaScript Java C++ Python Other
  1. CodeQL 59.3%
  2. C# 17.4%
  3. JavaScript 8.2%
  4. Java 7.9%
  5. C++ 3.0%
  6. Python 2.0%
  7. Other 2.2%
Branch: master
Find file
Clone or download

Clone with HTTPS

Use Git or checkout with SVN using the web URL.

Open in Desktop Download ZIP

Latest commit

@MathiasVP
MathiasVP Merge pull request #3481 from dbartol/github/codeql-c-analysis-team/69 
C++/C#: Allow memory operands to lack a definition
Latest commit a42d80a May 16, 2020

Files

Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
.github Actions: Disable labeler action. Dec 16, 2019
.vscode Tell GitHub to allow JSON files with comments Apr 24, 2020
change-notes Merge pull request #3408 from esbena/js/unsafe-html-expansion May 15, 2020
config C++/C#: Rename `sanity` -> `consistency` May 11, 2020
cpp Merge pull request #3481 from dbartol/github/codeql-c-analysis-team/69 May 16, 2020
csharp Merge pull request #3481 from dbartol/github/codeql-c-analysis-team/69 May 16, 2020
docs Merge pull request #3444 from dbartol/codeql-c-analysis-team/68 May 12, 2020
java Merge pull request #3474 from aschackmull/java/string-formatted May 16, 2020
javascript Merge pull request #3408 from esbena/js/unsafe-html-expansion May 15, 2020
misc add code scanning suites Mar 27, 2020
python Python: Move test into appropriate class. May 15, 2020
.codeqlmanifest.json Don't chain to ./codeql in .codeqlmanifest.json Feb 13, 2020
.editorconfig Normalize all text files to LF Sep 23, 2018
.gitattributes .gitattributes: PDB files are binary Mar 13, 2019
.gitignore Add a VS Code task to run `sync-files.py` Apr 23, 2020
.lgtm.yml JS: Exclude test cases from extraction May 7, 2019
CODEOWNERS Update requirements for docs review May 5, 2020
CODE_OF_CONDUCT.md Update code of conduct in line with GH Apr 23, 2020
CONTRIBUTING.md Update URL to new location Apr 28, 2020
LICENSE Relicense under MIT Apr 7, 2020
README.md Merge branch 'rc/1.24' into mergeback Apr 29, 2020

README.md

CodeQL

This open source repository contains the standard CodeQL libraries and queries that power LGTM and the other CodeQL products that GitHub makes available to its customers worldwide.

How do I learn CodeQL and run queries?

There is extensive documentation on getting started with writing CodeQL. You can use the interactive query console on LGTM.com or the CodeQL for Visual Studio Code extension to try out your queries on any open source project that's currently being analyzed.

Contributing

We welcome contributions to our standard library and standard checks. Do you have an idea for a new check, or how to improve an existing query? Then please go ahead and open a pull request! Before you do, though, please take the time to read our contributing guidelines. You can also consult our style guides to learn how to format your code for consistency and clarity, how to write query metadata, and how to write query help documentation for your query.

License

The code in this repository is licensed under the MIT License by GitHub.

Visual Studio Code integration

If you use Visual Studio Code to work in this repository, there are a few integration features to make development easier.

CodeQL for Visual Studio Code

You can install the CodeQL for Visual Studio Code extension to get syntax highlighting, IntelliSense, and code navigation for the QL language, as well as unit test support for testing CodeQL libraries and queries.

Tasks

The .vscode/tasks.json file defines custom tasks specific to working in this repository. To invoke one of these tasks, select the Terminal | Run Task... menu option, and then select the desired task from the dropdown. You can also invoke the Tasks: Run Task command from the command palette.

You can’t perform that action at this time.