Skip to content

CodeQL CLI: integrated support for uploading results to code scanning (from 3rd party CI systems) #198

@github-product-roadmap

Description

@github-product-roadmap

Summary

With the launch of Code Scanning, we also released the CodeQL Runner: a command-line tool that mimics functionality provided by the CodeQL Action, especially for users of 3rd party CI systems. The functionality of the CodeQL runner will be migrated into the native CodeQL CLI.

Intended Outcome

It will be much easier to set up CodeQL analysis for Code Scanning for those customers who rely on 3rd party CI/CD systems. Instead of downloading and installing an additional tool (the CodeQL Runner), customers can simply use the CodeQL CLI.

How will it work?

The CodeQL CLI already has a codeql github upload-results subcommand, which replaces the corresponding runner commands. We're working on multi-language support analysis and results upload, and multi-step build workflows support to get full feature parity between CodeQL Runner and CodeQL CLI.

Metadata

Metadata

Assignees

No one assigned

    Labels

    GitHub Advanced Security (GHAS)Product SKU: GitHub Advanced SecuritycodeqlFeature: GitHub codeqlgaFeature phase: Generally availableserverAvailable on ServershippedShipped

    Type

    No type
    No fields configured for issues without a type.

    Projects

    Status

    No status

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions