codeql-go

适用于 Go 的 CodeQL 提取器和库。「The CodeQL extractor and libraries for Go.」

Github星跟踪图

Go analysis support for CodeQL

This open-source repository contains the extractor, CodeQL libraries, and queries that power Go
support in LGTM and the other CodeQL products that GitHub
makes available to its customers worldwide.

It contains two major components:

  • an extractor, itself written in Go, that parses Go source code and converts it into a database
    that can be queried using CodeQL.
  • static analysis libraries and queries written in CodeQL that can be
    used to analyze such a database to find coding mistakes or security vulnerabilities.

The goal of this project is to provide comprehensive static analysis support for Go in CodeQL.

For the queries and libraries that power CodeQL support for other languages, visit the CodeQL
repository
.

Installation

Clone this repository.

Run scripts/install-deps.sh. This will ensure that the necessary external CodeQL packs are
downloaded to your machine. You will need to re-run this script whenever you pull new commits from
the repo.

If you want to use the CodeQL extension for Visual Studio Code, import this repository into your VS
Code workspace.

Usage

To analyze a Go codebase, either use the CodeQL command-line
interface
to create a database yourself, or
download a pre-built database from LGTM.com. You can then run any of the
queries contained in this repository either on the command line or using the VS Code extension.

Note that the lgtm.com branch of this
repository corresponds to the version of the queries that is currently deployed on LGTM.com.
The main branch may contain changes that
have not been deployed yet, so you may need to upgrade databases downloaded from LGTM.com before
running queries on them.

Contributions

Contributions are welcome! Please see our contribution guidelines and our
code of conduct for details on how to participate in our community.

Licensing

The code in this repository is licensed under the MIT license.

Resources

主要指标

概览
名称与所有者github/codeql-go
主编程语言
编程语言Makefile (语言数: 0)
平台Linux, Mac, Windows
许可证MIT License
所有者活动
创建于2019-10-28 21:43:26
推送于2023-01-05 15:54:33
最后一次提交
发布数49
最新版本名称archived (发布于 2022-09-06 14:26:09)
第一版名称v1.23.0 (发布于 )
用户参与
星数463
关注者数28
派生数126
提交数2.5k
已启用问题?
问题数47
打开的问题数1
拉请求数537
打开的拉请求数6
关闭的拉请求数82
项目设置
已启用Wiki?
已存档?
是复刻?
已锁定?
是镜像?
是私有?