Skill

CodeQL Code Scanning

Sets up CodeQL scanning through Actions or the CLI, and unsticks it when it fails.

Install

gh skills install github/awesome-copilot codeql

Triggers on

codeql.yml yazarken ya da düzeltirken, derlenen bir dilde build mode hatası alındığında, SARIF çıktısı yorumlanırken veya kod tarama alarmları tasnif edilirken

Needs tools

ReadWriteBash

Author: Ve Sharma
License: MIT

Repositoryhttps://github.com/github/awesome-copilot

Covers the decision between default and advanced setup, then the pieces advanced setup forces you to get right: the language matrix, build modes for compiled languages, query suite selection, dependency caching and custom query packs. The CLI half walks through creating a database locally, analyzing it and uploading the results, plus how to read the SARIF that comes out. Six reference files carry workflow configuration, CLI commands, compiled languages, SARIF output, alert management and troubleshooting, including per-component scanning in a monorepo.

Comments(0)

No comments yet — be the first.

Similar skills

Acquire Codebase Knowledge

Skill

Maps an unfamiliar repository into seven documents backed by file evidence.

Coding Workflows

MemSearch

Skill

Keeps one memory store that several coding agents read from and write to.

Agent Engineering

Ponytail

Skill

Argues for the smallest change that actually solves the problem.

Code Reviews