How to use CodeQL to scan the sink of code（only sink）

I want to know how to use CodeQL to scan the sink in the code and output it as a sarif file.

The issue names CodeQL sink scanning and SARIF output but provides no file, test, or entry point. First determine whether the requested workflow is supported and locate the relevant existing CodeQL guidance; done means documenting a reproducible procedure for scanning only sinks and producing SARIF output.

由索引模型根據 Issue 內容生成。