This repository contains CodeQL queries and libraries which support various Coding Standards.
Перейти к файлу
Kristen Newbury 9dc1ca41fa
Merge pull request #790 from github/lcartey/fix-help-repo-fetch
Ensure help is always loaded during pack creation process
2024-11-19 17:05:56 +00:00
.github Merge pull request #790 from github/lcartey/fix-help-repo-fetch 2024-11-19 17:05:56 +00:00
.vscode
apply-configuration Combine steps to apply LD_LIBRARY_PATH to both steps 2024-10-22 13:12:57 +01:00
c Fix broken test 2024-11-14 20:56:51 -08:00
change_notes Fix #629. 2024-10-30 14:02:40 +09:00
cpp Merge pull request #788 from fjatWbyT/fix-issue-629 2024-11-15 11:08:59 +00:00
docs Bump version to 2.38.0-dev 2024-10-24 20:44:19 +00:00
integration-tests/deviations
rule_packages Use range analysis to detect realloc() where size may be zero, vs, is exactly zero. 2024-10-18 18:15:06 -07:00
schemas Fix rule schema for implementation_scope in queries. 2024-10-04 13:03:25 -07:00
scripts Merge pull request #461 from rvermeulen/rvermeulen/add-webhook-handler 2024-11-12 14:02:01 +00:00
thirdparty/cert
.clang-format
.codeqlmanifest.json
.editorconfig
.gitattributes
.gitignore
CODE_OF_CONDUCT.md
CONTRIBUTING.md
LICENSE.md
README.md
SECURITY.md
amendments.csv
rules.csv Tag as amendment3, mark 17-13 not supportable 2024-10-04 11:35:49 -07:00
supported_codeql_configs.json Upgrading `github/codeql` dependency to 2.16.6 2024-10-08 14:32:43 +00:00

README.md

CodeQL Coding Standards

This repository contains CodeQL queries and libraries which support various Coding Standards.

Supported standards

Carnegie Mellon and CERT are registered trademarks of Carnegie Mellon University.

This repository contains CodeQL queries and libraries which support various Coding Standards for the C++14, C99 and C11 programming languages.

The following coding standards are supported:

🚧 Standards under development 🚧

The following standards are under active development:

How do I use the CodeQL Coding Standards Queries?

The use of the CodeQL Coding Standards is extensively documented in the user manual.

Use in a functional safety environment

The CodeQL Coding Standards is qualified as a "software tool" under "Part 8: Supporting processes" of ISO 26262 ("Road vehicles - Functional Safety") as described in our tool qualification documents. Use of the CodeQL Coding Standards is only compliant with the qualification if it is used as distributed by GitHub and according to the requirements described in the user manual.

Any changes to the CodeQL Coding Standards distribution and/or deviations from the requirements and steps described in the user manual runs the risk of non compliance.

Contributing

We welcome contributions to our standard library and standard checks. Do you have an idea for a new check, or how to improve an existing query? Then please go ahead and open a pull request! Before you do, though, please take the time to read our contributing guidelines. You can also consult our development handbook to learn about the requirements for a contribution.

License

Unless otherwise noted below, the code in this repository is licensed under the MIT License by GitHub.

Parts of certain query help files (.md extension) are reproduced under the following licenses:

These licenses are directly referenced where applicable.

All code in the thirdparty directory is licensed according to the files present in those sub directories.

All header files in c/common/test/includes/standard-library are licensed according to LICENSE


1This repository incorporates portions of the SEI CERT® Coding Standards available at https://wiki.sei.cmu.edu/confluence/display/seccode/SEI+CERT+Coding+Standards; however, such use does not necessarily constitute or imply an endorsement, recommendation, or favoring by Carnegie Mellon University or its Software Engineering Institute.