История

Josh Soref 0a4c724b69 spelling: implementation Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>		2022-10-11 00:23:36 -04:00
..
build	codeql-go merge prep: move into go/ directory	2022-05-20 10:07:19 -07:00
codeql-tools	Go: Remove the legacy tracer configuration files.	2022-09-09 11:13:01 +02:00
docs/language/learn-ql/go	Docs: Update references to github/codeql-go	2022-05-20 12:10:21 -07:00
downgrades	codeql-go merge prep: move into go/ directory	2022-05-20 10:07:19 -07:00
external-packs/codeql/suite-helpers/0.0.2	codeql-go merge prep: move into go/ directory	2022-05-20 10:07:19 -07:00
extractor	Indent blocks that gofmt would mistake for markdown	2022-08-19 19:06:21 +01:00
extractor-smoke-test	Go: fix search and tool paths for 'make test'	2022-05-20 10:22:47 -07:00
old-change-notes	codeql-go merge prep: move into go/ directory	2022-05-20 10:07:19 -07:00
ql	spelling: implementation	2022-10-11 00:23:36 -04:00
scripts	codeql-go merge prep: move into go/ directory	2022-05-20 10:07:19 -07:00
templates/project	codeql-go merge prep: move into go/ directory	2022-05-20 10:07:19 -07:00
tools	Go: fix search and tool paths for 'make test'	2022-05-20 10:22:47 -07:00
vendor	Upgrade Go extractor to latest golang and x-packages	2022-08-18 16:22:04 +01:00
CODE_OF_CONDUCT.md	codeql-go merge prep: move into go/ directory	2022-05-20 10:07:19 -07:00
CONTRIBUTING.md	Docs: Update references to github/codeql-go	2022-05-20 12:10:21 -07:00
LICENSE	codeql-go merge prep: move into go/ directory	2022-05-20 10:07:19 -07:00
Makefile	Go: Remove the legacy tracer configuration files.	2022-09-09 11:13:01 +02:00
README.md	Docs: Update references to github/codeql-go	2022-05-20 12:10:21 -07:00
SECURITY.md	codeql-go merge prep: move into go/ directory	2022-05-20 10:07:19 -07:00
alert_weighting.properties	codeql-go merge prep: move into go/ directory	2022-05-20 10:07:19 -07:00
codeql-extractor.yml	codeql-go merge prep: move into go/ directory	2022-05-20 10:07:19 -07:00
go.mod	Upgrade Go extractor to latest golang and x-packages	2022-08-18 16:22:04 +01:00
go.sum	Upgrade Go extractor to latest golang and x-packages	2022-08-18 16:22:04 +01:00

README.md

Go analysis support for CodeQL

This open-source repository contains the extractor, CodeQL libraries, and queries that power Go support in LGTM and the other CodeQL products that GitHub makes available to its customers worldwide.

It contains two major components:

an extractor, itself written in Go, that parses Go source code and converts it into a database that can be queried using CodeQL.
static analysis libraries and queries written in CodeQL that can be used to analyze such a database to find coding mistakes or security vulnerabilities.

The goal of this project is to provide comprehensive static analysis support for Go in CodeQL.

For the queries and libraries that power CodeQL support for other languages, visit the CodeQL repository.

Installation

Clone this repository.

Run scripts/install-deps.sh. This will ensure that the necessary external CodeQL packs are downloaded to your machine. You will need to re-run this script whenever you pull new commits from the repo.

If you want to use the CodeQL extension for Visual Studio Code, import this repository into your VS Code workspace.

Usage

To analyze a Go codebase, either use the CodeQL command-line interface to create a database yourself, or download a pre-built database from LGTM.com. You can then run any of the queries contained in this repository either on the command line or using the VS Code extension.

Note that the lgtm.com branch of this repository corresponds to the version of the queries that is currently deployed on LGTM.com. The main branch may contain changes that have not been deployed yet, so you may need to upgrade databases downloaded from LGTM.com before running queries on them.

Contributions

Contributions are welcome! Please see our contribution guidelines and our code of conduct for details on how to participate in our community.

Licensing