Skip to content

Latest commit

 

History

History
44 lines (30 loc) · 1014 Bytes

README.md

File metadata and controls

44 lines (30 loc) · 1014 Bytes
Raw

codeql-docker

CodeQL Docker image build on Ubuntu latest Docker image

Building Image

The install script will find and install the latest CodeQL bundle which contains the current version of the CLI and queries.

docker build -t organization/codeql .

Running

Dropping into shell
docker run -it  -v $PWD:/workspace geekmasher/codeql

Example Analysis

# Create database
codeql database create database_name --language=javascript

# Run analysis
codeql database analyze database_name \
    --format "sarif-latest" \
    --output "codeql-results.json" \
    javascript-code-scanning.qls

# Upload results to GitHub
codeql github upload-results --repository=<repository-name> \
      --ref=$GIT_REF \
      --commit=$GIT_HASH \
      --sarif="codeql-results.json"

Aliases

In the ~/.bashrc there is a number of values and functions that hopefully will make it a lot easier to use CodeQL CLI. This isn't required and can be removed in the Dockerfile.