История

Erik Krogh Kristensen 1218c4f4ed fix ql/name-casing, and drive-by QL-for-QL typo fix		2022-03-30 22:59:14 +02:00
..
.vscode	QL: move .vscode folder inside the ql subfolder	2021-12-14 14:39:03 +01:00
autobuilder	QL: Fix the autobuilder (temporary bad fix)	2021-12-17 20:23:02 +01:00
extractor	QL for QL: sync changes from Ruby	2022-02-07 17:44:40 +00:00
generator	QL for QL: make `node` column `unique`	2022-02-08 09:59:11 +00:00
node-types	QL for QL: sync changes from Ruby	2022-02-07 17:44:40 +00:00
ql	fix ql/name-casing, and drive-by QL-for-QL typo fix	2022-03-30 22:59:14 +02:00
scripts	QL: move files and folder, except dotfiles, into a ql subfolder	2021-12-14 14:34:53 +01:00
tools	QL for QL: add autobuilder that respects LGTM_INDEX_FILTERS	2021-12-17 16:05:21 +00:00
.gitattributes	QL: move .git files into the ql/ folder	2021-12-15 12:25:08 +01:00
.gitignore	QL: move .git files into the ql/ folder	2021-12-15 12:25:08 +01:00
Cargo.lock	QL: Support trailing comma in set literals	2022-01-03 15:48:24 +00:00
Cargo.toml	QL for QL: add autobuilder that respects LGTM_INDEX_FILTERS	2021-12-17 16:05:21 +00:00
README.md	QL: call the product `QL for QL` (because it rolls nicely).	2021-12-15 12:25:06 +01:00
codeql-extractor.yml	QL: move files and folder, except dotfiles, into a ql subfolder	2021-12-14 14:34:53 +01:00
create-extractor-pack.ps1	QL for QL: add autobuilder that respects LGTM_INDEX_FILTERS	2021-12-17 16:05:21 +00:00
create-extractor-pack.sh	QL for QL: add autobuilder that respects LGTM_INDEX_FILTERS	2021-12-17 16:05:21 +00:00

README.md

QL for QL

QL for QL is a CodeQL analysis designed to find common bug patterns in QL code.
This analysis is mostly used as a PR check in github/codeql.
QL for QL is experimental technology and not a supported product.

This directory contains the extractor, CodeQL libraries, and queries that power QL for QL.

Some setup is required to use QL for QL (see the below sections).

Building the tools from source

Install Rust (if using VSCode, you may also want the rust-analyzer extension), then run:

cargo build --release

Generating the database schema and QL library

The generated ql/src/ql.dbscheme and ql/src/codeql_ql/ast/internal/TreeSitter.qll files are included in the repository, but they can be re-generated as follows:

./create-extractor-pack.sh

Building a CodeQL database for a QL program

First, get an extractor pack:

Run ./create-extractor-pack.sh (Linux/Mac) or .\create-extractor-pack.ps1 (Windows PowerShell) and the pack will be created in the extractor-pack directory.

Then run

codeql database create <database-path> -l ql -s <project-source-path> --search-path <extractor-pack-path>

CodeQL can be configured to remember the extractor by setting the config file ~/.config/codeql/config to:

--search-path /full/path/to/extractor-pack

Running qltests

Run

codeql test run <test-path> --search-path <repository-root-path>