Sign inSign up

cesvn/codeql

By cesvn

•Updated over 3 years ago

Image
0

164

cesvn/codeql repository overview

⁠How to use cesvn/codeql

⁠Export the programing language

$ export language="javascript" 

⁠Export source code and test results paths

$ export source="/dir/to/analyze" 
$ export results="/dir/for/results" 

⁠Create the codeql db

 $ docker run --rm --name codeql-container -v ${source}:/opt/src -v ${results}:/opt/results -e CODEQL_CLI_ARGS="database create --language=${language} /opt/results/source_db -s /opt/src" cesvn/codeql

⁠Upgrade the db if necessary

 $ docker run --rm --name codeql-container -v ${source}:/opt/src -v ${results}:/opt/results -e CODEQL_CLI_ARGS=" database upgrade /opt/results/source_db" cesvn/codeql

⁠Run the queries in the qlpack

 $ docker run --rm --name codeql-container -v ${source}:/opt/src -v ${results}:/opt/results -e CODEQL_CLI_ARGS="database analyze --format=sarif-latest  -- 
  output=/opt/results/issues.sarif /opt/results/source_db ${language}-security-and-quality.qls" cesvn/codeql

⁠Scanning suites

⁠Code Scanning suite: Queries run by default in CodeQL code scanning on GitHub.
 ${language}-code-scanning.qls
⁠Security extended suite: Queries of lower severity and precision than the default queries
 ${language}-security-extended.qls
⁠Security and quality suite: Queries of lower severity and precision than the default queries
 ${language}-security-and-quality.qls 

⁠Parameters

/dir/to/analyze: path of project

/dir/for/results: path to store result

format : csv, sarif-latest, sarifv2.1.0

Tag summary

Content type

Image

Digest

sha256:d4ceb51b6…

Size

2 GB

Last updated

over 3 years ago

docker pull cesvn/codeql