begin-codeql

install step by step

1. https://github.com/github/codeql-cli-binaries/releases/latest/download/codeql.zip downnload the binary program

2. https://github.com/Semmle/ql download the library

3. install VScode and CodeQL extension

Create A Database

codeql database create jstest --language=javascript

---

reference

• https://securitylab.github.com/research
• https://securitylab.github.com/tools/codeql
• https://lgtm.com/
• https://github.com/github/vscode-codeql-starter
• https://help.semmle.com/QL/learn-ql/java/ql-for-java.html
• https://medium.com/@knownsec404team/run-queries-on-codebases-with-codeql-d304f238022b