github / github/codeql-cli-binaries
codeql cli to get the list of issues based on severity after analyze
- Dominant language
- No language data
- Stars
- 1k
- Forks
- 184
- PR merge metrics
- No merged PRs in 30d
Description
Hi, We just started using codeql cli for our code scanning.
I am looking for a codeql cli to give the list of issues based on severity once we run codeql analyze. I have checked the codeql cli manual and am unable to find anything. I understand codeql cli will produce SARIF output file when we run analyze but it is too big with lot of details which I don't want. I am just looking for a simplified result to get the list of issues based on severity. I can write a parser to parse the SARIF file, but before that just want to know if any cli is already available to do give me the result what I am looking for.
Thanks in advance.
Contributor guide
Research direction
Start with the CodeQL CLI analyze command and its SARIF output, then check the CLI manual for severity filtering or a simplified reporting entry point. Done would be a documented existing command or a clearly scoped proposal for producing the requested severity-based issue list.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github
- Domain
- cli, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100