introduction-to-codeql - GitLite

KO | EN

gitlite — search

#javascript #python #typescript #golang #go #android #linux #macos #nodejs #java #kubernetes #mcp #openai #open-source

introduction-to-codeql

(★ 145)

Enable code scanning and secure your code with CodeQL.

File Explorer

Download Latest Version (.zip)

- - additional-information.png
  - alert-overview.png
  - audit-log-alert-dismissed.png
  - audit-trail-fixed-alert.png
  - closed-alerts-button.png
  - code-scan-results.png
  - code-scanning-alerts-count.png
  - codeql-check-in-progress.png
  - codeql-default-configuration-box.png
  - codeql-filter.png
  - codeql-pr2.png
  - dismiss-alert-options.png
  - edit-button.png
  - enable-code-scanning.png
  - list-of-codeql-jobs.png
  - matrix-jobs.png
  - merge-button.png
  - python-analysis-logs.png
  - security-tab-overview.png
- - 1-step.md
  - 2-step.md
  - 3-step.md
  - 4-step.md
  - x-review.md
- - 0-start-exercise.yml
  - 1-step.yml
  - 2-step.yml
  - 3-step.yml
  - 4-step.yml
- - __init__.py
  - books.py
- __init__.py
- __main__.py
- routes.py
- webapp.py
- books.html
.gitignore
fixme
LICENSE
Pipfile
Pipfile.lock
README.md

# Installation Guide

1. Get the code

git clone https://github.com/skills/introduction-to-codeql

Downloads the entire project code from GitHub to your computer.

cd introduction-to-codeql

Moves into the project folder you just downloaded.

2. Python

Easy Recommended

Prerequisites

Git Needed to download the project code from GitHub.
Python 3 On Windows, be sure to check 'Add Python to PATH' during installation.

pipenv install

Type this command into your terminal and run it.

python <실행할 파일명>.py # README에서 정확한 실행 파일명을 확인하세요

Runs the Python script (or module).

✅ If it runs without errors and prints output in the terminal, it worked.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Enable CodeQL to secure your source code

_Learn to identify, resolve, and prevent insecure coding patterns._

## Welcome

- **Who is this for**: Developers, security engineers, open source maintainers.
- **What you'll learn**: How to enable code scanning to identify typical vulnerabilities like SQL injection, review alerts, and take action to fix them.
- **What you'll build**: An automated process to identify existing vulnerabilities and prevent future vulnerabilities in production code.
- **Prerequisites**:
  - [Introduction to GitHub](https://github.com/skills/introduction-to-github)
- **How long**: Less than 30 minutes.

### How to start this exercise

Simply copy the exercise to your account, then give your favorite Octocat (Mona) **about 20 seconds** to prepare the first lesson, then **refresh the page**.

[![](https://img.shields.io/badge/Copy%20Exercise-%E2%86%92-1f883d?style=for-the-badge&logo=github&labelColor=197935)](https://github.com/new?template_owner=skills&template_name=introduction-to-codeql&owner=%40me&name=skills-introduction-to-codeql&description=Exercise:+Introduction+to+CodeQL&visibility=public)

<details>
<summary>Having trouble? 🤷</summary><br/>

When copying the exercise, we recommend the following settings:

- For owner, choose your personal account or an organization to host the repository.
- We recommend creating a public repository, as private repositories will [use Actions minutes](https://docs.github.com/en/billing/managing-billing-for-github-actions/about-billing-for-github-actions).

If the exercise isn't ready in 20 seconds:

1. After your new repository is created, wait about 20 seconds, then refresh the page.
2. Follow the step-by-step instructions in the issue created in your repository.
3. If the page doesn't refresh automatically, please check the [Actions](../../actions) tab.
   - Check to see if a job is running. Sometimes it simply takes a bit longer.
   - If the page shows a failed job, please submit an issue. Nice, you found a bug! 🐛

</details>

---