Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
CatherineChiramel authored Jan 29, 2023
1 parent 220c872 commit 91cbeb0
Showing 1 changed file with 6 additions and 0 deletions.
6 changes: 6 additions & 0 deletions Security Analysis - CodeQL/README.md
Original file line number Diff line number Diff line change
@@ -1,3 +1,9 @@
We can use Codeql to evaluate the generated code snippets for security vulnerabilities. This folder contained CodeQL queries that can detect 18 out of the top 25 CWEs of 2021 in code.

### Requirements

To run this, CodeQL CLI needs to be installed on your system. The instructions to installation can be found [here](https://codeql.github.com/docs/codeql-cli/getting-started-with-the-codeql-cli/)

## Workflow of CodeQL
CodeQL treats code like data. Software vulnerabilities are found in code by executing queries (one specific software vulnerability = one specific query)
on a database representation of the code. To do so, first this database representation of the code files under scope of analysis have to be created. Then queries or query sets can be run against the database. The results of the queries will be printed to a result file.
Expand Down

0 comments on commit 91cbeb0

Please sign in to comment.