44> Current version of CodeQL only works for interpreted languages. We will add compiled languages support on future versions.
55
66CodeQL Container is a project aimed at making it easier to start using CodeQL (https://github.com/github/codeql ). This project
7- contains a Docker file which builds a container with the latest version of codeql-cli and codeql queries precompiled.
7+ contains a Docker file which builds a container, with the latest version of codeql-cli and codeql queries precompiled.
88It also contains scripts to keep the toolchain in the container updated. You can use this container to:
99
1010* Start using codeql-cli and run queries on your projects without installing it on your local machine.
@@ -18,17 +18,18 @@ We shall continue to add more features and would be happy to accept contribution
1818#### Downloading a pre-built container
1919
2020We keep updating the docker image periodically and uploading it to the Microsoft Container Registry at: mcr.microsoft.com/codeql/codeql-container.
21- You can run the image by running the command:
2221
22+ You can pull the image by running the command:
2323```
24- $ docker run --rm mcr.microsoft.com/codeql/codeql-container
24+ $ docker pull mcr.microsoft.com/codeql/codeql-container
2525```
2626
2727If you want to analyze a particular source directory with codeql, run the container as:
2828
2929```
3030$ docker run --rm --name codeql-container mcr.microsoft.com/codeql/codeql-container -v /dir/to/analyze:/opt/src -v /dir/for/results:/opt/results -e CODEQL_CLI_ARGS=<query run...>
3131```
32+
3233where ` /dir/to/analyze ` contains the source files that have to be analyzed, and ` /dir/for/results ` is where the result output
3334needs to be stored, and you can specify QL_PACKS environment variable for specific QL packs to be run on the provided code.
3435For more information on CodeQL and QL packs, please visit https://www.github.com/github/codeql .
@@ -62,7 +63,7 @@ $ docker run --rm --name codeql-container mcr.microsoft.com/codeql/codeql-contai
6263$ docker run --rm --name codeql-container mcr.microsoft.com/codeql/codeql-container -v /dir/to/analyze:/opt/src -v /dir/for/results:/opt/results -e CODEQL_CLI_ARGS="database analyze --format=sarifv2 --output=/opt/results/issues.sarif /opt/src/source_db
6364```
6465
65- This command will run all the QL packs related to security and output the results to the results folder .
66+ For more information on CodeQL and QL packs, please visit https://www.github.com/github/codeql .
6667
6768#### Building the container
6869
0 commit comments