github
/
codeql-dubbo-workshop
зеркало из
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
27 коммитов 2 Ветки 0 Теги 124 MiB
CodeQL 91.1%
Dockerfile 8.9%
Перейти к файлу
Alvaro Muñoz c2f3da0de1
Merge pull request #2 from github/add-license-1 
Create LICENSE
 		2023-01-09 11:53:05 +01:00
.devcontainer update devcontainer 2021-12-03 17:35:13 +01:00
codeql@2cbad4aed6 Added the codeql submodule to the project. 2021-09-19 16:29:39 +02:00
databases update db 2021-12-03 18:03:30 +01:00
exercises Make the qlpack compatible with MRVA 2022-02-15 10:10:51 -08:00
.DS_Store first commit 2021-09-15 18:00:07 +02:00
.gitignore first commit 2021-09-15 18:00:07 +02:00
.gitmodules first commit 2021-09-15 18:00:07 +02:00
EkoParty2021_slides.pdf Add EkoParty materials 2021-10-07 11:26:25 +02:00
HacktivityCon2021_slides.pdf Add HacktivityCon slides 2021-09-20 12:42:52 +02:00
LICENSE Create LICENSE 2023-01-09 11:52:55 +01:00
README.md Update README.md 2021-10-01 11:48:10 +02:00
workshop.md Update workshop.md 2021-10-04 12:06:10 +02:00
workspace.code-workspace add workspace file 2021-09-17 13:18:55 +02:00

README.md

CodeQL as an audit oracle: Dubbo Workshop

5th and 6th October 2021

Preparation

For this workshop, you are invited to actively participate by writing CodeQL queries in Visual Studio Code. To do this, you will need to have Visual Studio Code up and running.

Running locally

  1. Install Visual Studio Code.

  2. Clone the repository (https://github.com/github/codeql-dubbo-workshop) locally. Make sure to get the submodules. For example with the command line

git clone --recursive https://github.com/github/codeql-dubbo-workshop.git

  1. Open the repository folder in Visual Studio Code.

  2. Install the CodeQL extension for Visual Studio Code, from the Visual Studio Code extensions marketplace. (Use the "Extensions" icon on the left of Visual Studio Code).

  3. Click on the CodeQL icon on the left, dismiss the dialog if needed, then select "Add a CodeQL database/From an archive". Navigate to the databases folder and select dubbo_2.7.8.zip.

  4. Go back to the CodeQL view (click on the CodeQL icon on the left if necessary). Hover over the database and select "Set Current Database".

  5. Open the file HelloWorld.ql in VScode. (Use the Explorer icon on the left of Visual Studio Code, and locate the file in the root of the repository).

  6. Right-click on the file, and select "CodeQL: Run query". You should see the "CodeQL Query Results" window on the right hand side.

  7. Proceed to the main content.

📚 Resources