codeql
codeql copied to clipboard
CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
**Description of the issue** I’m currently working on building a tool and need help getting the full struct path for struct field in CodeQL. For example, consider the following Go...
Is there a way, directly or indirectly, to have a CodeQL query use an external tool? ```ql predicate isCurrentYear(string year) { year = cmd("date +%Y") } ```
In a typescript project, if there is a keyword called "Date" in the code comment, it stops at that file during the extracting step. Are there any keywords that should...
Model FastAPI & Starlette CORS Middlewares for misconfiguration
This introduces documentation for the Models-as-Data library for Go.
This implements support for test extraction by two mechanisms: * In autobuild mode, setting `CODEQL_EXTRACTOR_GO_EXTRACT_TESTS` to `true`. * In manual build mode, tracing a `go test` command (`go test -c`...
The new names aren't great, so feel free to change them, but I think we do need an explicit example of updating two relations using one ql file.