update-codeql-query-dataflow-csharp

Migrate legacy C# CodeQL dataflow queries to the v2 API with ConfigSig.

30|3|Updated Feb 4, 2026
One-click install
npx skills add https://github.com/advanced-security/codeql-development-mcp-server --skill update-codeql-query-dataflow-csharp
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: update-codeql-query-dataflow-csharp
Source: https://github.com/advanced-security/codeql-development-mcp-server/tree/main/.github/skills/update-codeql-query-dataflow-csharp
Command: npx skills add https://github.com/advanced-security/codeql-development-mcp-server --skill update-codeql-query-dataflow-csharp

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Migrates legacy v1 C# CodeQL dataflow queries to the modern v2 API, enabling a unified dataflow model and safer migrations.

Core Features & Use Cases

  • TDD-driven migration: Ensures exact result equivalence between v1 and v2 queries.
  • ConfigSig-based migration: Replaces v1 DataFlow::Configuration with DataFlow::ConfigSig and Global wrappers.
  • C#-specific coverage: Handles common C# dataflow patterns including sources, sinks, barriers, and flow steps.

Quick Start

Migrate your first C# dataflow query from v1 to v2 and validate against baselines.

Frequently Asked Questions about update-codeql-query-dataflow-csharp

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I migrate C# CodeQL dataflow queries from v1 to v2?

Migrate C# CodeQL dataflow queries by replacing v1 DataFlow::Configuration with the v2 DataFlow::ConfigSig API and global Config module wrappers. The process uses test-driven development to ensure migrated queries match original results.

What is the CodeQL dataflow v2 API for C# taint-tracking?

The CodeQL dataflow v2 API for C# taint-tracking uses DataFlow::ConfigSig and a global Config module to establish a unified dataflow model. This modernizes legacy v1 configurations into a standardized migration target.

How do I validate CodeQL query migration results between v1 and v2?

Validate CodeQL query migration by capturing baseline test results from original v1 queries, then re-running tests against v2 migration artifacts to verify exact result equivalence across sources, sinks, barriers, and flow steps.

Does the CodeQL v2 dataflow migration handle C# sources, sinks, and barriers?

Yes, the CodeQL v2 dataflow migration handles common C# dataflow patterns including sources, sinks, barriers, and flow steps. It ensures these elements produce exactly the same results as the original v1 queries.

Why do my migrated CodeQL v2 dataflow queries fail to compile?

Migrated CodeQL v2 dataflow queries may fail to compile if legacy v1 DataFlow::Configuration modules are not fully replaced with DataFlow::ConfigSig and global Config wrappers, preventing validation through baseline test re-runs.