CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
Перейти к файлу
Rasmus Wriedt Larsen bfa7553095 Python: urlsplit sanitizer handles `in [KNOWN_VALUE]` 2020-02-21 16:03:29 +01:00
.github Actions: Disable labeler action. 2019-12-16 13:53:00 +01:00
change-notes Merge pull request #2643 from esbena/js/unsafe-jquery 2020-02-18 09:26:14 +01:00
config C++: separate IR ValueNumber newtype and interface 2020-02-06 15:35:20 +01:00
cpp C++: Accept output 2020-02-19 10:35:03 +01:00
csharp Merge pull request #2631 from hvitved/dataflow/generalize-flow-summaries 2020-02-17 18:22:46 +00:00
docs docs: technical feedback 2020-02-17 16:20:31 +00:00
java Merge pull request #2631 from hvitved/dataflow/generalize-flow-summaries 2020-02-17 18:22:46 +00:00
javascript JavaScript: Distinguish `{lo}` and `{lo,}` in the regular expression parser. 2020-02-19 08:26:14 +00:00
misc Suites: Fix suite definition. 2019-11-13 12:03:13 +00:00
python Python: urlsplit sanitizer handles `in [KNOWN_VALUE]` 2020-02-21 16:03:29 +01:00
.codeqlmanifest.json Don't chain to ./codeql in .codeqlmanifest.json 2020-02-13 15:30:15 +01:00
.editorconfig Normalize all text files to LF 2018-09-23 16:24:31 -07:00
.gitattributes .gitattributes: PDB files are binary 2019-03-13 10:42:28 +00:00
.gitignore Adds .gitignore entry for vim swap files. 2020-02-13 15:23:50 -08:00
.lgtm.yml JS: Exclude test cases from extraction 2019-05-07 14:36:35 +01:00
CODEOWNERS CODEOWNERS: Add python team 2019-11-14 16:42:12 +01:00
CODE_OF_CONDUCT.md Fix indentation of list item in code of conduct 2019-07-16 08:49:29 +01:00
CONTRIBUTING.md Docs: Update mention of "QL for Eclipse" 2019-12-17 12:33:01 +00:00
COPYRIGHT QL code and tests for C#/C++/JavaScript. 2018-08-02 17:53:23 +01:00
LICENSE QL code and tests for C#/C++/JavaScript. 2018-08-02 17:53:23 +01:00
README.md Update README.md 2019-11-15 19:31:07 +01:00

README.md

CodeQL

This open source repository contains the standard CodeQL libraries and queries that power LGTM, and the other products that Semmle makes available to its customers worldwide.

How do I learn CodeQL and run queries?

There is extensive documentation on getting started with writing CodeQL. You can use the interactive query console on LGTM.com or the CodeQL for Visual Studio Code extension to try out your queries on any open source project that's currently being analyzed.

Contributing

We welcome contributions to our standard library and standard checks. Do you have an idea for a new check, or how to improve an existing query? Then please go ahead and open a pull request! Before you do, though, please take the time to read our contributing guidelines. You can also consult our style guides to learn how to format your code for consistency and clarity, how to write query metadata, and how to write query help documentation for your query.

License

The code in this repository is licensed under Apache License 2.0 by Semmle.