codeql-scan

Solid

Execute CodeQL security scans with language detection, database caching, and SARIF output. Use when performing static security analysis on Python or GitHub Actions code.

AI & Automation 38 stars 13 forks Updated today MIT

Install

View on GitHub

Quality Score: 77/100

Stars 20%

Recency 20%

100

Frontmatter 20%

Documentation 15%

100

Issue Health 10%

License 10%

100

Description 5%

100

Skill Content

# CodeQL Scan Skill Execute CodeQL security scans with automated language detection, database caching, and SARIF output generation. ## Quick Start ```bash # Via Claude Code skill system /codeql-scan # Full scan with auto-detected languages python3 .claude/skills/codeql-scan/scripts/invoke_codeql_scan.py --operation full # Quick scan with cached databases python3 .claude/skills/codeql-scan/scripts/invoke_codeql_scan.py --operation quick # Validate configuration only python3 .claude/skills/codeql-scan/scripts/invoke_codeql_scan.py --operation validate ``` ## Triggers - `Run CodeQL scan` - `Check for vulnerabilities` - `Validate CodeQL configuration` - `Quick security scan` - `Scan for security issues` ## Decision Tree ```text Need CodeQL analysis? +-- First time setup --> python3 .codeql/scripts/install_codeql.py +-- Validate config --> invoke_codeql_scan.py --operation validate +-- Full repository scan --> invoke_codeql_scan.py --operation full +-- Quick scan (cached) --> invoke_codeql_scan.py --operation quick +-- Specific language --> invoke_codeql_scan.py --operation full --languages python +-- CI mode --> invoke_codeql_scan.py --operation full --ci ``` ### When to Use Each Operation | Operation | Use When | Performance | Output | |-----------|----------|-------------|--------| | `full` | First scan, major changes, pre-PR validation | 30-60s | SARIF + Console | | `quick` | Iterative development, minor changes | 10-20s | SARI...

Details

Author: rjmurillo
Repository: rjmurillo/ai-agents
Created: 7 months ago
Last Updated: today
Language: Markdown
License: MIT

Integrates with

Anthropic · AI GitHub · DevTools

Similar Skills

Semantically similar based on skill content — not just same category

AI & Automation Listed

codeql

Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Triggers on "run codeql", "codeql scan", "codeql analysis", "build codeql database", or "find vulnerabilities with codeql". Supports "run all" (security-and-quality + security-experimental suites) and "important only" (high-precision security findings) scan modes. Also handles creating data extension models and processing CodeQL SARIF output.

1 Updated 1 weeks ago

Lu1sDV

AI & Automation Solid

skill-scanner

Scan, audit, validate, package, or pre-submit AgentSkills using the local BunsDev codeql-sdk/clawhub-audit scanner and OpenClaw skill validation. Use when a user asks to run codeql-sdk, scan a skill before submitting, security-audit a SKILL.md package, produce JSON/SARIF reports, or ensure a skill is ready for Cody/ClawHub handoff.

37 Updated today

OpenCoven

Code & Development Solid

security-sweep

Scan codebase for security vulnerabilities, hardcoded secrets, injection flaws, misconfigurations, and attack surfaces. Use when user wants a security audit, vulnerability scan, or to find security issues.

0 Updated yesterday

Ksx9797