Scan code for vulnerabilities
Scan your code for vulnerabilities by configuring code scanning, managing configurations, running scans locally or in your editor, integrating with existing tools, and troubleshooting issues.
Configure code scanning
Configure code scanning for your repositories by choosing between default or advanced setup and customizing advanced settings as needed.
Manage your configuration
Manage and refine your code scanning configuration by monitoring tool status, updating default setup settings, and enforcing protections as your needs evolve.
Scan from the command line
Run code scanning from the command line using the CodeQL CLI to configure scans, customize queries, and troubleshoot results.
Scan from VS Code
Scan and analyze code from Visual Studio Code using CodeQL to write, test, and run queries, explore code structure, and manage databases and packs.
Integrate with existing tools
Integrate code scanning with your existing tools and workflows by running scans in your CI system or uploading results to GitHub using Static Analysis Results Interchange Format (SARIF).
Troubleshooting
Diagnose and resolve issues with code scanning by troubleshooting analysis errors and problems uploading SARIF results.