codeql-query-model

What problem does it solve?

CodeQL query modeling helps security engineers and developers reason about complex relational representations of codebases. It clarifies how to structure queries over AST relations, enabling consistent and scalable code analysis.

Core Features & Use Cases

• Relational Code Abstractions: Treats AST nodes, edges, and types as first-class relations for robust code queries.
• Query Language Design Guidance: Demonstrates how to express analyses with derived predicates, transitive closures, and constrained sets.
• Taint Tracking & Data Flow Foundations: Illustrates building reusable security analysis patterns over code graphs.
• Use Case: Build a library of per-language CodeQL patterns that can be composed to detect common vulnerabilities across languages.

Quick Start

Write a simple CodeQL model to classify functions by taint flow and produce a basic report.