GitHub CodeQL packaged and precompiled in a container.
1.3K
Start running CodeQL queries on your project with a single command:
$ docker run --rm -v "<source-code-directory>:/opt/src" -v "<results-directory>:/opt/results" btnguyen2k/codeql-container <command> [options]
Input/Output directories
source-code-directory: The directory containing the source code to scan, must map this directory to the container's /opt/src directory.results-directory: The directory to store the scan results, must map this directory to the container's /opt/results directory.Commands
| Command | Description |
|---|---|
help | Print the help information and exit |
security | Run the security and quality analyzing query pack |
security-extended | Run the security analyzing extended query pack |
scan | Run the standard code scanning query pack |
Options
| Option | Required | Default Value | Description |
|---|---|---|---|
-l=language or --language=language | true | The programming language of the source code to scan, for example --language=java | |
-o=format or --output=format | false | sarif-latest | The output format of the scan results, for example --output=csv |
--override | false | Override the results directory if it is not empty |
csv or sarif. See CodeQL CLI documentation for more details.Example:
$ docker run -it --rm -v "$(pwd):/opt/src" -v "/tmp:/opt/results" btnguyen2k/codeql-container security --override --language=go --output=csv
This project is licensed under the MIT License - see the LICENSE.md file for details.
Project repository: https://github.com/btnguyen2k/codeql-container
Feel free to create pull requests or issues to report bugs or suggest new features. Please search the existing issues before filing new issues to avoid duplicates. For new issues, file your bug or feature request as a new issue.
If you find this project useful, please start it.
Content type
Image
Digest
sha256:c9c11b78a…
Size
1.3 GB
Last updated
over 2 years ago
docker pull btnguyen2k/codeql-container