github / github/codeql-cli-binaries

codeql cli to get the list of issues based on severity after analyze

Open
#88 5 comments 0 reactions 0 assignees View on GitHub
CLI
Dominant language
No language data
Stars
1k
Forks
184
PR merge metrics
No merged PRs in 30d

Description

Hi, We just started using codeql cli for our code scanning.

I am looking for a codeql cli to give the list of issues based on severity once we run codeql analyze. I have checked the codeql cli manual and am unable to find anything. I understand codeql cli will produce SARIF output file when we run analyze but it is too big with lot of details which I don't want. I am just looking for a simplified result to get the list of issues based on severity. I can write a parser to parse the SARIF file, but before that just want to know if any cli is already available to do give me the result what I am looking for.

Thanks in advance.

Contributor guide

Open the contributing guide

Research direction

Start with the CodeQL CLI analyze command and its SARIF output, then check the CLI manual for severity filtering or a simplified reporting entry point. Done would be a documented existing command or a clearly scoped proposal for producing the requested severity-based issue list.

Written by the indexing model from the issue text.

Assessment

Tech stack
github
Domain
cli, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.