История

Arthur Baars 976daddd36 Move files to ruby subfolder		2021-10-15 11:47:28 +02:00
..
.vscode	Move files to ruby subfolder	2021-10-15 11:47:28 +02:00
autobuilder	Move files to ruby subfolder	2021-10-15 11:47:28 +02:00
codeql@91b2ee2f10	Move files to ruby subfolder	2021-10-15 11:47:28 +02:00
doc	Move files to ruby subfolder	2021-10-15 11:47:28 +02:00
extractor	Move files to ruby subfolder	2021-10-15 11:47:28 +02:00
generator	Move files to ruby subfolder	2021-10-15 11:47:28 +02:00
node-types	Move files to ruby subfolder	2021-10-15 11:47:28 +02:00
ql	Move files to ruby subfolder	2021-10-15 11:47:28 +02:00
scripts	Move files to ruby subfolder	2021-10-15 11:47:28 +02:00
tools	Move files to ruby subfolder	2021-10-15 11:47:28 +02:00
.codeqlmanifest.json	Move files to ruby subfolder	2021-10-15 11:47:28 +02:00
.gitattributes	Move files to ruby subfolder	2021-10-15 11:47:28 +02:00
.gitignore	Move files to ruby subfolder	2021-10-15 11:47:28 +02:00
CODE_OF_CONDUCT.md	Move files to ruby subfolder	2021-10-15 11:47:28 +02:00
CONTRIBUTING.md	Move files to ruby subfolder	2021-10-15 11:47:28 +02:00
Cargo.lock	Move files to ruby subfolder	2021-10-15 11:47:28 +02:00
Cargo.toml	Move files to ruby subfolder	2021-10-15 11:47:28 +02:00
LICENSE	Move files to ruby subfolder	2021-10-15 11:47:28 +02:00
Makefile	Move files to ruby subfolder	2021-10-15 11:47:28 +02:00
README.md	Move files to ruby subfolder	2021-10-15 11:47:28 +02:00
codeql-extractor.yml	Move files to ruby subfolder	2021-10-15 11:47:28 +02:00
codeql-ruby.code-workspace	Move files to ruby subfolder	2021-10-15 11:47:28 +02:00

README.md

Ruby analysis support for CodeQL

This open-source repository contains the extractor, CodeQL libraries, and queries that power Ruby support in LGTM and the other CodeQL products that GitHub makes available to its customers worldwide.

It contains two major components:

an extractor, written in Rust, that parses Ruby source code and converts it into a database that can be queried using CodeQL.
static analysis libraries and queries written in CodeQL that can be used to analyze such a database to find coding mistakes or security vulnerabilities.

The goal of this project is to provide comprehensive static analysis support for Ruby in CodeQL.

For the queries and libraries that power CodeQL support for other languages, visit the CodeQL repository.

Installation

Simply clone this repository. There are no external dependencies.

If you want to use the CodeQL extension for Visual Studio Code, import this repository into your VS Code workspace.

Usage

To analyze a Ruby codebase, either use the CodeQL command-line interface to create a database yourself, or download a pre-built database from LGTM.com. You can then run any of the queries contained in this repository either on the command line or using the VS Code extension.

Note that the lgtm.com branch of this repository corresponds to the version of the queries that is currently deployed on LGTM.com. The main branch may contain changes that have not been deployed yet, so you may need to upgrade databases downloaded from LGTM.com before running queries on them.

Contributions

Contributions are welcome! Please see our contribution guidelines and our code of conduct for details on how to participate in our community.

Licensing