Skill

CodeQL Code Scanning

Sets up CodeQL scanning through Actions or the CLI, and unsticks it when it fails.

GitHub stars

38K

Repository on GitHub

Install

gh skills install github/awesome-copilot codeql

Triggers on

codeql.yml yazarken ya da düzeltirken, derlenen bir dilde build mode hatası alındığında, SARIF çıktısı yorumlanırken veya kod tarama alarmları tasnif edilirken

Needs tools

ReadWriteBash

Author: Ve Sharma
License: MIT

Repositoryhttps://github.com/github/awesome-copilot

Covers the decision between default and advanced setup, then the pieces advanced setup forces you to get right: the language matrix, build modes for compiled languages, query suite selection, dependency caching and custom query packs. The CLI half walks through creating a database locally, analyzing it and uploading the results, plus how to read the SARIF that comes out. Six reference files carry workflow configuration, CLI commands, compiled languages, SARIF output, alert management and troubleshooting, including per-component scanning in a monorepo.

Comments(0)

No comments yet — be the first.

Similar skills

SAST Configuration

Skill

Sets up Semgrep, CodeQL and SonarQube so the pipeline blocks real findings.

DevOps & InfrastructureSecurity & Compliance

NightVision

Skill

Runs authorized DAST scans and walks each SARIF finding back to the line of code that produced it.

Security & Compliance

SonarQube

Skill

Puts SonarQube's rule set, secrets scanning and quality gate inside the agent's own edit loop.

Code ReviewsSecurity & Compliance