コードスキャンをカスタマイズする

CodeQL パックとカスタムクエリを作成して使用することで、プロジェクト固有のセキュリティニーズを満たすようにコードスキャンをカスタマイズする方法について説明します。

Evaluating default setup for code scanning

Learn how to assess how code scanning is working for you, and how you can customize your setup to best meet your needs.

You can build a CodeQL database containing the data needed to analyze your code.

You can run queries against a CodeQL database extracted from a codebase.

You can use the CodeQL CLI to upload CodeQL analysis results to GitHub.

You can run code scanning in a container by ensuring that all processes run in the same container.

You can use CodeQL packs to run CodeQL queries maintained by other people, or to share CodeQL queries that you've developed.

You can create query suites for queries you frequently use in your CodeQL analyses.

You can use CodeQL packs to create, share, depend on, and run CodeQL queries and libraries.