codeql/go
Owen Mansel-Chan e43fd72fc1
Fix log message about Glide
2023-06-29 16:56:09 +01:00
..
build
codeql-tools Add identify-environment scripts 2023-05-11 11:51:42 +01:00
docs/language/learn-ql/go
downgrades Go: Enable implicit this warnings for remaining packs 2023-06-27 11:49:37 +02:00
external-packs/codeql/suite-helpers/0.0.2 Go: Enable implicit this warnings for remaining packs 2023-06-27 11:49:37 +02:00
extractor Fix log message about Glide 2023-06-29 16:56:09 +01:00
extractor-smoke-test
old-change-notes spelling: recognition 2022-10-20 08:21:02 -04:00
ql Add integration tests 2023-06-29 16:56:06 +01:00
scripts Remove Go's install-deps.sh script 2023-01-03 10:45:06 +00:00
templates/project
tools
vendor Upgrade Go extractor compiler and dependency versions 2023-02-14 17:34:47 +00:00
CODE_OF_CONDUCT.md
CONTRIBUTING.md Update CodeQL CLI articles with migration message 2023-02-02 14:11:02 -05:00
LICENSE
Makefile Go: include new scripts in Makefile 2023-05-26 10:13:40 +01:00
README.md Update CodeQL CLI articles with migration message 2023-02-02 14:11:02 -05:00
SECURITY.md
alert_weighting.properties
codeql-extractor.yml Specify language names in extractor packs 2022-12-23 13:15:04 +00:00
go.mod Upgrade Go to 1.20 2023-02-14 17:59:18 +00:00
go.sum Upgrade Go extractor compiler and dependency versions 2023-02-14 17:34:47 +00:00

README.md

Go analysis support for CodeQL

This sub-folder contains the extractor, CodeQL libraries, and queries that power Go support for CodeQL.

It contains two major components:

  • an extractor, itself written in Go, that parses Go source code and converts it into a database that can be queried using CodeQL.
  • static analysis libraries and queries written in CodeQL that can be used to analyze such a database to find coding mistakes or security vulnerabilities.

Usage

To analyze a Go codebase, either use the CodeQL command-line interface to create a database yourself, or download a pre-built database from GitHub.com. You can then run any of the queries contained in this repository either on the command line or using the VS Code extension.

Contributions

Contributions are welcome! Please see our contribution guidelines and our code of conduct for details on how to participate in our community.

Licensing

The code in this repository is licensed under the MIT license.

Resources