• CodeQL »

CodeQL documentation

• CodeQL overview
  • About CodeQL
  • Supported languages and frameworks
  • System requirements
  • CodeQL tools
  • CodeQL glossary
• CodeQL for Visual Studio Code
  • About CodeQL for Visual Studio Code
  • Setting up CodeQL in Visual Studio Code
  • Analyzing your projects
  • Exploring the structure of your source code
  • Exploring data flow with path queries
  • Running CodeQL queries at scale with multi-repository variant analysis
  • Testing CodeQL queries in Visual Studio Code
  • Working with CodeQL packs in Visual Studio Code
  • Customizing settings
  • Troubleshooting CodeQL for Visual Studio Code
  • Troubleshooting variant analysis
  • About telemetry in CodeQL for Visual Studio Code
• CodeQL CLI
  • Using the CodeQL CLI
    • About the CodeQL CLI
    • Getting started with the CodeQL CLI
    • Creating CodeQL databases
    • Extractor options
    • Analyzing databases with the CodeQL CLI
    • Using custom queries with the CodeQL CLI
    • Creating CodeQL query suites
    • Testing custom queries
    • Testing query help files
    • Creating and working with CodeQL packs
    • Publishing and using CodeQL packs
    • Specifying command options
  • CodeQL CLI reference
    • About CodeQL packs
    • About CodeQL workspaces
    • Query reference files
    • SARIF output
    • Exit codes
    • Extractor options
  • CodeQL CLI manual
• Writing CodeQL queries
  • CodeQL queries
    • About CodeQL queries
    • Metadata for CodeQL queries
    • Query help files
    • Defining the results of a query
    • Providing locations in CodeQL queries
    • About data flow analysis
    • Creating path queries
    • Troubleshooting query performance
    • Debugging data-flow queries using partial flow
  • QL tutorials
    • Introduction to QL
    • Find the thief
    • Catch the fire starter
    • Crown the rightful heir
    • Cross the river
• CodeQL language guides
  • CodeQL for C and C++
    • Basic query for C and C++ code
    • CodeQL library for C and C++
    • Functions in C and C++
    • Expressions, types, and statements in C and C++
    • Conversions and classes in C and C++
    • Analyzing data flow in C and C++
    • Analyzing data flow in C and C++ (new)
    • Refining a query to account for edge cases
    • Detecting a potential buffer overflow
    • Using the guards library in C and C++
    • Using range analysis for C and C++
    • Hash consing and value numbering
  • CodeQL for C#
    • Basic query for C# code
    • CodeQL library for C#
    • Analyzing data flow in C#
  • CodeQL for Go
    • Basic query for Go code
    • CodeQL library for Go
    • Abstract syntax tree classes for working with Go programs
    • Modeling data flow in Go libraries
  • CodeQL for Java and Kotlin
    • Basic query for Java and Kotlin code
    • CodeQL library for Java
    • Analyzing data flow in Java
    • Types in Java
    • Overflow-prone comparisons in Java
    • Navigating the call graph
    • Annotations in Java
    • Javadoc
    • Working with source locations
    • Abstract syntax tree classes for working with Java programs
  • CodeQL for JavaScript
    • Basic query for JavaScript code
    • CodeQL library for JavaScript
    • CodeQL library for TypeScript
    • Analyzing data flow in JavaScript and TypeScript
    • Using flow labels for precise data flow analysis
    • Specifying additional remote flow sources for JavaScript
    • Using type tracking for API modeling
    • Abstract syntax tree classes for working with JavaScript and TypeScript programs
    • Data flow cheat sheet for JavaScript
  • CodeQL for Python
    • Basic query for Python code
    • CodeQL library for Python
    • Analyzing data flow in Python
    • Using API graphs in Python
    • Functions in Python
    • Expressions and statements in Python
    • Analyzing control flow in Python
  • CodeQL for Ruby
    • Basic query for Ruby code
    • CodeQL library for Ruby
    • Abstract syntax tree classes for working with Ruby programs
    • Analyzing data flow in Ruby
    • Using API graphs in Ruby
• QL language reference
  • About the QL language
  • Predicates
  • Queries
  • Types
  • Modules
  • Signatures
  • Aliases
  • Variables
  • Expressions
  • Formulas
  • Annotations
  • Recursion
  • Lexical syntax
  • Name resolution
  • Evaluation of QL programs
  • QL language specification

• © GitHub, Inc.
• Terms
• Privacy