codeql/go
Erik Krogh Kristensen bfc95c6f13
Merge pull request #16510 from erik-krogh/go-command
Go: Update the QHelp for `go/command-injection`.
2024-05-17 17:45:10 +02:00
..
actions/test Go: bring back qhelp in action 2024-05-08 14:31:00 +02:00
build
codeql-tools Go: rename `pkg_files` to something less confusing 2024-05-02 15:44:06 +02:00
docs/language/learn-ql/go
documentation/library-coverage Add changed framework coverage reports 2024-05-15 00:16:53 +00:00
downgrades Go: create whole extractor pack with bazel 2024-04-26 12:01:23 +02:00
external-packs/codeql/suite-helpers/0.0.2
extractor Go: Document return values for `Autobuild` 2024-05-15 09:38:31 +01:00
extractor-smoke-test
integration-tests-lib Go: Run `resolve build-environment` in integration tests 2024-05-14 15:46:03 +01:00
old-change-notes
ql Merge pull request #16510 from erik-krogh/go-command 2024-05-17 17:45:10 +02:00
scripts
templates/project
tools
BUILD.bazel Bazel/Go: make installer work from internal repo and on windows 2024-05-03 17:45:57 +02:00
CODE_OF_CONDUCT.md
CONTRIBUTING.md Deprecate the CodeQL for VS Code docs in favour of docs.github.com version 2024-04-25 07:59:33 +00:00
LICENSE
Makefile Go: bring back `make` and CI changes 2024-05-06 14:56:21 +02:00
README.md
SECURITY.md
alert_weighting.properties
codeql-extractor.yml
create_extractor_pack.py Go: fix Windows installation 2024-05-06 14:55:35 +02:00
gen.py Bazel/Go: make `@codeql//go:gen` runnable from internal repo 2024-05-03 14:52:17 +02:00
rules.bzl Bazel/Go: use native cross compilation for fat binaries 2024-05-02 09:21:43 +02:00

README.md

Go analysis support for CodeQL

This sub-folder contains the extractor, CodeQL libraries, and queries that power Go support for CodeQL.

It contains two major components:

  • an extractor, itself written in Go, that parses Go source code and converts it into a database that can be queried using CodeQL.
  • static analysis libraries and queries written in CodeQL that can be used to analyze such a database to find coding mistakes or security vulnerabilities.

Usage

To analyze a Go codebase, either use the CodeQL command-line interface to create a database yourself, or download a pre-built database from GitHub.com. You can then run any of the queries contained in this repository either on the command line or using the VS Code extension.

Contributions

Contributions are welcome! Please see our contribution guidelines and our code of conduct for details on how to participate in our community.

Licensing

The code in this repository is licensed under the MIT license.

Resources