Skip to content

Latest commit

 

History

History
40 lines (31 loc) · 2.85 KB

File metadata and controls

40 lines (31 loc) · 2.85 KB
title Creating a custom query
shortTitle Custom query creation
versions
fpt ghec ghes
*
*
*
intro You can work from a template to write your own code to create a custom query to analyze a specific language.
redirect_from
/code-security/codeql-for-vs-code/using-the-advanced-functionality-of-the-codeql-for-vs-code-extension/creating-a-custom-query
/code-security/how-tos/scan-code-for-vulnerabilities/scan-from-vs-code/creating-a-custom-query
contentType how-tos
category
Customize vulnerability detection with CodeQL

You can write custom {% data variables.product.prodname_codeql %} queries to find specific issues relevant to your own project. This is optional, and the github/codeql repository contains a large number of example queries you can use instead.

Creating a custom query

You create a new query file from a template for a given language, which imports the standard libraries for analyzing that language.

  1. In the extension sidebar, open the "Queries" view, then click the Create query icon.

  2. In the {% data variables.product.prodname_vscode_command_palette_shortname %}, select the target language for your query. If you've chosen not to create your custom query in an existing directory, selecting a language will autogenerate a directory labeled codeql-custom-queries-LANGUAGE, where LANGUAGE is the name of the selected language. A query template labeled example.ql will then be added to the existing or autogenerated directory.

  3. In the template, write your custom query, then save the file. Once your query is finished, you can run it from the "Queries" view.

Further reading

You can read about how to write queries for supported languages in the {% data variables.product.prodname_codeql %} documentation: