Using the CodeQL CLI
You can use the CodeQL CLI to locally develop, test and run CodeQL queries on software projects.
GitHub CodeQL is licensed on a per-user basis upon installation. You can use CodeQL only for certain tasks under the license restrictions. For more information, see "About the CodeQL CLI."
If you have a GitHub Enterprise account and GitHub Advanced Security license, you can use CodeQL for automated analysis, continuous integration and continuous delivery. You can create an enterprise account by contacting the sales team. For more information, see "About GitHub Advanced Security."
About the CodeQL CLI
You can use the CodeQL CLI to run CodeQL processes locally on software projects.
Getting started with the CodeQL CLI
To get started with the CodeQL CLI, you need to set up the CLI so that it can access the tools and libraries required to create and analyze databases.
Creating CodeQL databases
You can build a CodeQL database containing the data needed to query your code.
Extractor options
You can use the CodeQL CLI to run CodeQL processes locally on software projects.
Analyzing databases with the CodeQL CLI
You can run queries against a CodeQL database extracted from a codebase.
Using custom queries with the CodeQL CLI
You can write your own CodeQL queries to find specific vulnerabilities and errors.
Creating CodeQL query suites
You can create query suites for queries you frequently use in your CodeQL analyses.
Testing custom queries
You can set up tests for your CodeQL queries to ensure that they continue to return the expected results with new releases of the CodeQL CLI.
Testing query help files
You can use the CodeQL CLI to preview your query help files as Markdown and ensure they are valid.
Creating and working with CodeQL packs
You can use CodeQL packs to create, share, depend on, and run CodeQL queries and libraries.
Publishing and using CodeQL packs
You can publish your own CodeQL packs and use packs published by other people.
Specifying command options in a CodeQL configuration file
You can save default command options in a CodeQL configuration file.