CodeQL for Visual Studio Code¶

The CodeQL extension for Visual Studio Code adds rich language support for CodeQL and allows you to easily find problems in codebases.

• About CodeQL for Visual Studio Code: CodeQL for Visual Studio Code is an extension that lets you write, run, and test CodeQL queries in Visual Studio Code.
• Setting up CodeQL in Visual Studio Code: You can install and configure the CodeQL extension in Visual Studio Code.
• Analyzing your projects: You can run queries on CodeQL databases and view the results in Visual Studio Code.
• Exploring the structure of your source code: You can use the AST viewer to display the abstract syntax tree of a CodeQL database.
• Exploring data flow with path queries: You can run CodeQL queries in VS Code to help you track the flow of data through a program, highlighting areas that are potential security vulnerabilities.
• Testing CodeQL queries in Visual Studio Code: You can run unit tests for CodeQL queries using the Visual Studio Code extension.
• Working with CodeQL packs in Visual Studio Code: You can view and edit CodeQL packs in Visual Studio Code.
• Customizing settings: You can edit the settings for the CodeQL extension to suit your needs.
• Troubleshooting CodeQL for Visual Studio Code: You can use the detailed information written to the extension’s log files if you need to troubleshoot problems.
• About telemetry in CodeQL for Visual Studio Code: If you specifically opt in to permit GitHub to do so, GitHub will collect usage data and metrics for the purposes of helping the core developers to improve the CodeQL extension for VS Code.