← All tools

CodeQL

SAST · Advanced

Semantic code analysis for vulnerability patterns.

Knowledge reference only. Prefer in-browser Labs first. Use this tool only on systems you own or have written authorization to test.

What to learn

  • Query language
  • CI integration

Legitimate use

Deep SAST for supported languages.

Official docs →

Example commands (lab VMs only)

  • codeql database analyze
    Analyze a cloned lab repo