CodeQL documentation¶

• CodeQL overview
  • About CodeQL
    • Resources for learning CodeQL
    • About variant analysis
    • CodeQL analysis
    • About CodeQL databases
  • Supported languages and frameworks
  • System requirements
  • CodeQL change logs
    • CodeQL 2.19.3 (2024-11-07)
    • CodeQL 2.19.2 (2024-10-21)
    • CodeQL 2.19.1 (2024-10-04)
    • CodeQL 2.19.0 (2024-09-18)
    • CodeQL 2.18.4 (2024-09-12)
    • CodeQL 2.18.3 (2024-08-28)
    • CodeQL 2.18.2 (2024-08-13)
    • CodeQL 2.18.1 (2024-07-25)
    • CodeQL 2.18.0 (2024-07-11)
    • CodeQL 2.17.6 (2024-06-27)
    • CodeQL 2.17.5 (2024-06-12)
    • CodeQL 2.17.4 (2024-06-03)
    • CodeQL 2.17.3 (2024-05-17)
    • CodeQL 2.17.2 (2024-05-07)
    • CodeQL 2.17.1 (2024-04-24)
    • CodeQL 2.17.0 (2024-04-04)
    • CodeQL 2.16.6 (2024-03-26)
    • CodeQL 2.16.5 (2024-03-21)
    • CodeQL 2.16.4 (2024-03-11)
    • CodeQL 2.16.3 (2024-02-22)
    • CodeQL 2.16.2 (2024-02-12)
    • CodeQL 2.16.1 (2024-01-25)
    • CodeQL 2.16.0 (2024-01-16)
    • CodeQL 2.15.5 (2023-12-20)
    • CodeQL 2.15.4 (2023-12-11)
    • CodeQL 2.15.3 (2023-11-22)
    • CodeQL 2.15.2 (2023-11-13)
    • CodeQL 2.15.1 (2023-10-19)
    • CodeQL 2.15.0 (2023-10-11)
    • CodeQL 2.14.6 (2023-09-26)
    • CodeQL 2.14.5 (2023-09-14)
    • CodeQL 2.14.4 (2023-09-12)
    • CodeQL 2.14.3 (2023-08-25)
    • CodeQL 2.14.2 (2023-08-11)
    • CodeQL 2.14.1 (2023-07-27)
    • CodeQL 2.14.0 (2023-07-13)
    • CodeQL 2.13.5 (2023-07-05)
    • CodeQL 2.13.4 (2023-06-19)
    • CodeQL 2.13.3 (2023-05-31)
    • CodeQL 2.13.1 (2023-05-03)
    • CodeQL 2.13.0 (2023-04-20)
    • CodeQL 2.12.7 (2023-04-18)
    • CodeQL 2.12.6 (2023-04-04)
    • CodeQL 2.12.5 (2023-03-21)
    • CodeQL 2.12.4 (2023-03-09)
    • CodeQL 2.12.3 (2023-02-23)
    • CodeQL 2.12.2 (2023-02-07)
    • CodeQL 2.12.1 (2023-01-23)
    • CodeQL 2.12.0 (2023-01-10)
    • CodeQL 2.11.6 (2022-12-13)
    • CodeQL 2.11.5 (2022-12-07)
    • CodeQL 2.11.4 (2022-11-24)
    • CodeQL 2.11.3 (2022-11-11)
    • CodeQL 2.11.2 (2022-10-25)
    • CodeQL 2.11.1 (2022-10-11)
    • CodeQL 2.11.0 (2022-09-28)
    • CodeQL 2.10.5 (2022-09-13)
    • CodeQL 2.10.4 (2022-08-31)
    • CodeQL 2.10.3 (2022-08-15)
    • CodeQL 2.10.2 (2022-08-02)
    • CodeQL 2.10.1 (2022-07-19)
    • CodeQL 2.10.0 (2022-06-27)
    • CodeQL 2.9.4 (2022-06-20)
    • CodeQL 2.9.3 (2022-05-31)
    • CodeQL 2.9.2 (2022-05-16)
    • CodeQL 2.9.1 (2022-05-05)
    • CodeQL 2.9.0 (2022-04-26)
    • CodeQL 2.8.5 (2022-04-07)
    • CodeQL 2.8.4 (2022-03-29)
    • CodeQL 2.8.3 (2022-03-14)
    • CodeQL 2.8.2 (2022-02-28)
    • CodeQL 2.8.1 (2022-02-15)
    • CodeQL 2.8.0 (2022-02-04)
    • CodeQL 2.7.6 (2022-01-24)
    • CodeQL 2.7.5 (2022-01-17)
    • CodeQL 2.7.3 (2021-12-06)
    • CodeQL 2.7.2 (2021-11-22)
    • CodeQL 2.7.1 (2021-11-15)
    • CodeQL 2.7.0 (2021-10-27)
    • CodeQL 2.6.3 (2021-10-06)
    • CodeQL 2.6.2 (2021-09-21)
    • CodeQL 2.6.1 (2021-09-07)
    • CodeQL 2.6.0 (2021-08-24)
    • CodeQL 2.5.9 (2021-08-09)
    • CodeQL 2.5.8 (2021-07-26)
    • CodeQL 2.5.7 (2021-07-02)
    • CodeQL 2.5.6 (2021-06-22)
    • CodeQL 2.5.5 (2021-05-17)
    • CodeQL 2.5.4 (2021-05-03)
    • CodeQL 2.5.3 (2021-04-30)
    • CodeQL 2.5.2 (2021-04-21)
    • CodeQL 2.5.1 (2021-04-19)
    • CodeQL 2.5.0 (2021-03-26)
    • CodeQL 2.4.6 (2021-03-19)
    • CodeQL 2.4.5 (2021-03-08)
    • CodeQL 2.4.4 (2021-02-12)
    • CodeQL 2.4.3 (2021-01-29)
    • CodeQL 2.4.2 (2021-01-22)
    • CodeQL 2.4.1 (2020-12-19)
  • CodeQL tools
  • CodeQL glossary
• Writing CodeQL queries
  • CodeQL queries
    • About CodeQL queries
    • Metadata for CodeQL queries
    • Query help files
    • Defining the results of a query
    • Providing locations in CodeQL queries
    • About data flow analysis
    • Creating path queries
    • Troubleshooting query performance
    • Debugging data-flow queries using partial flow
  • QL tutorials
    • Introduction to QL
    • Find the thief
    • Catch the fire starter
    • Crown the rightful heir
    • Cross the river
  • Running CodeQL queries
    • Work through a CodeQL tutorial
    • Develop a new CodeQL query
    • Run your query against a specific codebase
    • Run the standard CodeQL queries
• CodeQL language guides
  • CodeQL for C and C++
    • Basic query for C and C++ code
    • CodeQL library for C and C++
    • Functions in C and C++
    • Expressions, types, and statements in C and C++
    • Conversions and classes in C and C++
    • Analyzing data flow in C and C++
    • Refining a query to account for edge cases
    • Detecting a potential buffer overflow
    • Using the guards library in C and C++
    • Using range analysis for C and C++
    • Hash consing and value numbering
    • Advanced dataflow scenarios for C/C++
    • Customizing library models for C and C++
  • CodeQL for C#
    • Basic query for C# code
    • CodeQL library for C#
    • Analyzing data flow in C#
    • Customizing library models for C#
  • CodeQL for Go
    • Basic query for Go code
    • CodeQL library for Go
    • Abstract syntax tree classes for working with Go programs
    • Modeling data flow in Go libraries
  • CodeQL for Java and Kotlin
    • Basic query for Java and Kotlin code
    • CodeQL library for Java and Kotlin
    • Analyzing data flow in Java and Kotlin
    • Types in Java and Kotlin
    • Overflow-prone comparisons in Java and Kotlin
    • Navigating the call graph
    • Annotations in Java and Kotlin
    • Javadoc
    • Working with source locations
    • Abstract syntax tree classes for working with Java and Kotlin programs
    • Customizing library models for Java and Kotlin
  • CodeQL for JavaScript and TypeScript
    • Basic query for JavaScript and TypeScript code
    • CodeQL library for JavaScript
    • CodeQL library for TypeScript
    • Analyzing data flow in JavaScript and TypeScript
    • Using flow labels for precise data flow analysis
    • Specifying additional remote flow sources for JavaScript
    • Using type tracking for API modeling
    • Abstract syntax tree classes for working with JavaScript and TypeScript programs
    • Data flow cheat sheet for JavaScript
    • Customizing Library Models for JavaScript
  • CodeQL for Python
    • Basic query for Python code
    • CodeQL library for Python
    • Analyzing data flow in Python
    • Using API graphs in Python
    • Functions in Python
    • Expressions and statements in Python
    • Analyzing control flow in Python
    • Customizing Library Models for Python
  • CodeQL for Ruby
    • Basic query for Ruby code
    • CodeQL library for Ruby
    • Abstract syntax tree classes for working with Ruby programs
    • Analyzing data flow in Ruby
    • Using API graphs in Ruby
    • Customizing Library Models for Ruby
  • CodeQL for Swift
    • Basic query for Swift code
    • Analyzing data flow in Swift
• QL language reference
  • About the QL language
  • Predicates
  • Queries
  • Types
  • Modules
  • Signatures
  • Aliases
  • Variables
  • Expressions
  • Formulas
  • Annotations
  • Recursion
  • Lexical syntax
  • Name resolution
  • Evaluation of QL programs
  • QL language specification