How to use CodeQL to scan the sink of code（only sink）
Open
question
- Dominant language
- CodeQL
- Stars
- 10.1k
- Forks
- 2.1k
- Avg merge
- 2d 15h
- Merged PRs (30d)
- 141
Description
I want to know how to use CodeQL to scan the sink in the code and output it as a sarif file.
Contributor guide
Research direction
The issue names CodeQL sink scanning and SARIF output but provides no file, test, or entry point. First determine whether the requested workflow is supported and locate the relevant existing CodeQL guidance; done means documenting a reproducible procedure for scanning only sinks and producing SARIF output.
Written by the indexing model from the issue text.
Assessment
- Domain
- documentation, security
- Issue type
- Documentation
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100