github / github/codeql

Feature request: Cross-database query

Open
#8,652 1 comment 6 reactions 0 assignees View on GitHub
question
Dominant language
CodeQL
Stars
10.1k
Forks
2.1k
Avg merge
2d 15h
Merged PRs (30d)
141

Description

It's very common for a project to have many dependencies. Sometimes just analyzing application A will call a method in dependency B, and when you look at them as isolated pieces of software, codeQL might not find any problems. However, if you manually build a database containing both codebases and let codeQL analyze the whole chain, a new result is found.

My proposal is for codeQL to allow a user to have many active databases when running a query and for it to cross-reference every method, data type, class, etc., when running its queries. Another viable yet less preferable option would be to be able to merge databases.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.