CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
Перейти к файлу
Erik Krogh Kristensen 9c06c48dc7
Merge pull request #2884 from esbena/js/practically-exploitable-redos
JS: add query js/exploitable-polynomial-redos
2020-02-27 10:19:17 +01:00
.github Actions: Disable labeler action. 2019-12-16 13:53:00 +01:00
change-notes Merge pull request #2884 from esbena/js/practically-exploitable-redos 2020-02-27 10:19:17 +01:00
config C++/C#: Fix sync config file for value numbering sharing 2020-02-13 22:32:52 +01:00
cpp Merge pull request #2910 from aschackmull/dataflow/cleanup 2020-02-25 12:47:10 +01:00
csharp Merge pull request #2887 from MathiasVP/fix-ir-gen-switch 2020-02-24 13:29:27 +01:00
docs Merge branch 'rc/1.23' into 123-mergeback 2020-02-19 16:36:39 +00:00
java Merge pull request #2910 from aschackmull/dataflow/cleanup 2020-02-25 12:47:10 +01:00
javascript Merge pull request #2884 from esbena/js/practically-exploitable-redos 2020-02-27 10:19:17 +01:00
misc Suites: Fix suite definition. 2019-11-13 12:03:13 +00:00
python Merge pull request #2904 from RasmusWL/python-http-clients 2020-02-26 15:49:41 +01:00
.codeqlmanifest.json Don't chain to ./codeql in .codeqlmanifest.json 2020-02-13 15:30:15 +01:00
.editorconfig Normalize all text files to LF 2018-09-23 16:24:31 -07:00
.gitattributes .gitattributes: PDB files are binary 2019-03-13 10:42:28 +00:00
.gitignore Adds .gitignore entry for vim swap files. 2020-02-13 15:23:50 -08:00
.lgtm.yml JS: Exclude test cases from extraction 2019-05-07 14:36:35 +01:00
CODEOWNERS CODEOWNERS: Add python team 2019-11-14 16:42:12 +01:00
CODE_OF_CONDUCT.md Fix indentation of list item in code of conduct 2019-07-16 08:49:29 +01:00
CONTRIBUTING.md Docs: Update mention of "QL for Eclipse" 2019-12-17 12:33:01 +00:00
COPYRIGHT QL code and tests for C#/C++/JavaScript. 2018-08-02 17:53:23 +01:00
LICENSE QL code and tests for C#/C++/JavaScript. 2018-08-02 17:53:23 +01:00
README.md Update README.md 2019-11-15 19:31:07 +01:00

README.md

CodeQL

This open source repository contains the standard CodeQL libraries and queries that power LGTM, and the other products that Semmle makes available to its customers worldwide.

How do I learn CodeQL and run queries?

There is extensive documentation on getting started with writing CodeQL. You can use the interactive query console on LGTM.com or the CodeQL for Visual Studio Code extension to try out your queries on any open source project that's currently being analyzed.

Contributing

We welcome contributions to our standard library and standard checks. Do you have an idea for a new check, or how to improve an existing query? Then please go ahead and open a pull request! Before you do, though, please take the time to read our contributing guidelines. You can also consult our style guides to learn how to format your code for consistency and clarity, how to write query metadata, and how to write query help documentation for your query.

License

The code in this repository is licensed under Apache License 2.0 by Semmle.