Agent skill

codeql-scan

Run CodeQL semantic code analysis for security vulnerabilities

Stars 163
Forks 31

Install this agent skill to your Project

npx add-skill https://github.com/majiayu000/claude-skill-registry/tree/main/skills/other/other/codeql-scan

SKILL.md

CodeQL Security Analysis

Run GitHub CodeQL for deep semantic vulnerability detection.

What To Do

  1. GitHub Actions integration (.github/workflows/codeql.yml):

    yaml
    - uses: github/codeql-action/init@v3
      with:
        languages: csharp, javascript
    - uses: github/codeql-action/autobuild@v3
    - uses: github/codeql-action/analyze@v3
    
  2. Local analysis (requires CodeQL CLI):

    bash
    codeql database create codeql-db --language=csharp
    codeql database analyze codeql-db --format=sarif-latest --output=codeql.sarif
    

Arguments

  • --language=<lang>: csharp, javascript, or both

Expand your agent's capabilities with these related and highly-rated skills.

Didn't find tool you were looking for?

Be as detailed as possible for better results