github / github/codeql-cli-binaries

codeql cli to get the list of issues based on severity after analyze

未關閉
#88 5 則留言 0 個 reaction 已指派 0 人 在 GitHub 檢視
CLI
主要語言
沒有語言資料
星號
1k
分支
184
PR 合併指標
30 天內沒有已合併 PR

描述

Hi, We just started using codeql cli for our code scanning.

I am looking for a codeql cli to give the list of issues based on severity once we run codeql analyze. I have checked the codeql cli manual and am unable to find anything. I understand codeql cli will produce SARIF output file when we run analyze but it is too big with lot of details which I don't want. I am just looking for a simplified result to get the list of issues based on severity. I can write a parser to parse the SARIF file, but before that just want to know if any cli is already available to do give me the result what I am looking for.

Thanks in advance.

貢獻指南

開啟貢獻指南

研究方向

Start with the CodeQL CLI analyze command and its SARIF output, then check the CLI manual for severity filtering or a simplified reporting entry point. Done would be a documented existing command or a clearly scoped proposal for producing the requested severity-based issue list.

由索引模型根據 Issue 內容生成。

評估

技術堆疊
github
領域
cli, security
Issue 類型
功能
難度
5/5
預估耗時
一週以上
活躍度
停滯
描述清晰度
需要釐清
新手友好度
20/100

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。