Run codeQL analysis on your source code, without installing codeQL locally
357
How to use this image:
Change to the source code folder and
docker run --rm -v $(pwd):/project/ --env INPUT="./" --env OUTPUT="./result.sarif" mionita1980/codeql-js
If you have multiple projects with dependencies, change to the source code base folder and
docker run --rm -v $(pwd):/project/ --env INPUT="./mysource1" --env OUTPUT="./result_mysource1.sarif" mionita1980/codeql-js
where mysource1 is the folder of one of your projects, which may depend on other projects (e.g. mysource2) in the same base folder
Both the INPUT (source code folder) and OUTPUT (location of the save
.sariffile) are relative to the current folder you run the command from.
In case you wonder, this image was built from this project.
Content type
Image
Digest
sha256:e0721a07c…
Size
1.9 GB
Last updated
7 months ago
docker pull mionita1980/codeql-js