codeql

Detect security vulnerabilities with CodeQL static analysis and SARIF output.

Updated Feb 26, 2026

Search Tags:#static analysis #data flow #security analysis #vulnerability detection #codeql #taint tracking

Ready to run

npx skills add https://github.com/keremtoker468-dotcom/restoran --skill codeql-keremtoker468-dotcom

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: codeql
Source: https://github.com/keremtoker468-dotcom/restoran/tree/main/.claude/skills/codeql
Command: npx skills add https://github.com/keremtoker468-dotcom/restoran --skill codeql-keremtoker468-dotcom

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of finding security vulnerabilities in codebases using sophisticated static analysis techniques, including data flow and taint tracking.

Core Features & Use Cases

Vulnerability Detection: Identifies security flaws like injection vulnerabilities, insecure deserialization, and more.
Database Building: Creates CodeQL databases from source code for compiled and interpreted languages.
Data Flow Analysis: Tracks the flow of untrusted data through the application to pinpoint potential exploits.
Use Case: A security engineer can use this Skill to perform a comprehensive security audit of a new microservice before deployment, ensuring critical vulnerabilities are identified and fixed.

Quick Start

Run a full CodeQL scan on the current project to find security vulnerabilities.

Frequently Asked Questions about codeql

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I find security vulnerabilities in source code using static analysis?▼

Static analysis identifies security vulnerabilities by tracking untrusted data flow through your application. This approach uses interprocedural taint tracking to detect injection flaws and insecure deserialization across multiple programming languages without executing the code.

What is taint tracking and how does it detect injection vulnerabilities?▼

Taint tracking monitors the flow of untrusted data from sources to sinks to detect injection vulnerabilities. By performing interprocedural data flow analysis, it pinpoints potential exploits where user-controlled input reaches sensitive operations without proper sanitization.

How do I run a CodeQL scan for a comprehensive security audit?▼

To run a CodeQL scan, you first build a CodeQL database from your source code, then select appropriate query rulesets to execute. The scan processes the results into SARIF output format, providing a detailed report of identified security flaws for your audit.

Does static analysis with data flow tracking work for both compiled and interpreted languages?▼

Static analysis with data flow tracking supports both compiled and interpreted languages. The database building process extracts code representations from your source files, allowing vulnerability detection and security reviews across diverse technology stacks.

What is the best way to process SARIF output from a vulnerability scan?▼

Processing SARIF output involves parsing the standardized format to extract vulnerability detection results from your static analysis. This output contains detailed data flow paths and rule diagnostics generated during the CodeQL database query execution.

Can I use interprocedural analysis for vulnerability detection on a new microservice?▼

Interprocedural analysis is highly effective for vulnerability detection on a new microservice. It tracks data flow across function boundaries to find security flaws, ensuring critical vulnerabilities are identified and fixed before deployment.