codeql-scan

Run CodeQL semantic code analysis for security vulnerabilities

Files1

View on GitHub

SKILL.md

GitHub

CodeQL Security Analysis

Run GitHub CodeQL for deep semantic vulnerability detection.

What To Do

  1. GitHub Actions integration (.github/workflows/codeql.yml):

    - uses: github/codeql-action/init@v3
  with:
    languages: csharp, javascript
- uses: github/codeql-action/autobuild@v3
- uses: github/codeql-action/analyze@v3

  2. Local analysis (requires CodeQL CLI):

    codeql database create codeql-db --language=csharp
codeql database analyze codeql-db --format=sarif-latest --output=codeql.sarif

Arguments

  • --language=<lang>: csharp, javascript, or both

Related in security

git-workflow

Git workflow guidance for commits, branches, and pull requests

by agno-agi
37,144

clerk-observability

Implement monitoring, logging, and observability for Clerk authentication. Use when setting up monitoring, debugging aut...

by jeremylongshore
1,061

juicebox-migration-deep-dive

Advanced Juicebox data migration strategies. Use when migrating from other recruiting platforms, performing bulk data im...

by jeremylongshore
1,061