Collection of community-driven CodeQL query, library and extension packs
Using a githubsecuritylab/codeql-LANG-queries
query pack will reference the default suite for that pack (e.g. python.qls
for python). However, you may use a different suite such as python-audit.qls
by referencing the query pack with the following syntax: githubsecuritylab/codeql-python-queries:suites/python-audit.qls
. The examples below work for both syntaxes.
- name: Initialize CodeQL
uses: github/codeql-action/init@v2
with:
languages: ${{ matrix.language }}
packs: githubsecuritylab/codeql-${{ matrix.language }}-queries
$ cat codeql-config.yml | grep -A 1 'packs:'
packs:
- githubsecuritylab/codeql-python-queries
codeql database analyze db/ --download githubsecuritylab/codeql-python-queries --format=sarif-latest --output=results.sarif
This project is licensed under the terms of the MIT open source license. Please refer to MIT for the full terms.
Please create GitHub issues for any feature requests, bugs, or documentation problems.