codeql

The CodeQL skill provides automated security scanning for codebases by leveraging CodeQL's interprocedural data flow and taint tracking analysis. It is designed to detect potential security vulnerabilities and weaknesses in multiple programming languages, including Python, JavaScript/TypeScript, Go, Java/Kotlin, C/C++, C#, Ruby, and Swift. By building a CodeQL database and running queries against it, this skill helps developers and security engineers identify high-risk code patterns and areas susceptible to exploitation, reducing the likelihood of security incidents before deployment.

This skill supports several key capabilities, including executing comprehensive scans using either 'run all' or 'important only' modes. It handles the creation of custom data extension models to catch vulnerabilities that standard queries might miss, and it ensures robust database quality through assessments of file counts, extraction completeness, and error checks. Additionally, it processes CodeQL SARIF output to produce organized results and maintains a structured output directory containing logs, databases, diagnostics, extensions, and final results. The skill also provides guidance for platform-specific considerations, such as macOS Apple Silicon workarounds, and enforces step-by-step workflow execution to ensure accurate and complete analysis.

CodeQL is particularly suited for security teams, developers, and DevSecOps practitioners who need to integrate automated security analysis into their development pipelines. Typical use cases include scanning applications before deployment, auditing third-party libraries for vulnerabilities, and maintaining high-security standards in enterprise codebases. Its structured approach and support for multiple languages make it versatile for projects ranging from small open-source repositories to large-scale enterprise systems, providing actionable insights to improve code security and quality.