CodeQL for Visual Studio Code¶
The CodeQL extension for Visual Studio Code adds rich language support for CodeQL and allows you to easily find problems in codebases.
- About CodeQL for Visual Studio Code: CodeQL for Visual Studio Code is an extension that lets you write, run, and test CodeQL queries in Visual Studio Code.
- Setting up CodeQL in Visual Studio Code: You can install and configure the CodeQL extension in Visual Studio Code.
- Analyzing your projects: You can run queries on CodeQL databases and view the results in Visual Studio Code.
- Exploring the structure of your source code: You can use the AST viewer to display the abstract syntax tree of a CodeQL database.
- Exploring data flow with path queries: You can run CodeQL queries in VS Code to help you track the flow of data through a program, highlighting areas that are potential security vulnerabilities.
- Running CodeQL queries at scale with multi-repository variant analysis: You can run queries against groups of repositories on GitHub.com and view results in Visual Studio Code as each analysis finishes.
- Testing CodeQL queries in Visual Studio Code: You can run unit tests for CodeQL queries using the Visual Studio Code extension.
- Working with CodeQL packs in Visual Studio Code: You can view, create, and edit all types of CodeQL pack in Visual Studio Code.
- Using the CodeQL model editor: You can view, create, and edit CodeQL model packs using a dedicated editor.
- Customizing settings: You can edit the settings for the CodeQL extension to suit your needs.
- Troubleshooting CodeQL for Visual Studio Code: You can use the detailed information written to the extension’s log files if you need to troubleshoot problems with analysis of local CodeQL databases.
- Troubleshooting variant analysis: You can use the detailed information written to workflow log files in your controller repository if you need to troubleshoot problems with analysis of CodeQL databases stored on GitHub.com.
- About telemetry in CodeQL for Visual Studio Code: If you specifically opt in to permit GitHub to do so, GitHub will collect usage data and metrics for the purposes of helping the core developers to improve the CodeQL extension for VS Code.