Description

CodeQL is a semantic code analysis engine designed for product security teams. It enables users to find critical vulnerabilities with relevant analyses, query databases directly from the command line or using the Visual Studio Code extension, discover the areas that are potential security vulnerabilities, detect, triage, and prioritize fixes for existing problems in the code, monitor results from code scanning across the repositories or the organization, and schedule scans for specific days and times. Features include data flow analysis, threat model exploration, built-in libraries for taint tracking, and supports both compiled and interpreted languages.