You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+31-26Lines changed: 31 additions & 26 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -46,16 +46,18 @@ This uses `codeql pack ls` to discover all packs in the workspace and runs `code
46
46
47
47
> **Note:** The generated `codeql-pack.lock.yml` files should be committed to your repository to ensure reproducible dependency resolution across your team.
48
48
49
-
### Step 3: Create an Issue for the CodeQL query you want to develop
49
+
### Step 3: Create an Issue for the CodeQL query or data extension you want to develop
50
50
51
51
1.**Navigate to Issues** in your new repository
52
52
2.**Click "New Issue"**
53
-
3.**Select "Request new CodeQL Query"** template
54
-
4.**Fill in the details:**
55
-
- Choose target language (e.g., Java, Python, JavaScript)
56
-
- Describe what the query should detect
57
-
- Provide code examples (optional but recommended)
58
-
- Specify severity level
53
+
3.**Select a template:**
54
+
-**"Request new CodeQL Query"** for custom query development
55
+
-**"Request new CodeQL Data Extension"** for modeling an unmodeled library via YAML (models-as-data)
56
+
4.**Fill in the template fields** — each template will guide you, but at minimum:
57
+
-**Target language**
58
+
-**Description** of what to detect or which library to model
59
+
-**Library URL** (data extensions) or **Severity level** (queries)
|[Request new CodeQL Query](.github/ISSUE_TEMPLATE/query-create.yml)| Create a new CodeQL query to detect specific code patterns or vulnerabilities |
86
-
|[Update existing CodeQL Query](.github/ISSUE_TEMPLATE/query-update.yml)| Modify an existing query to improve accuracy or add new detection capabilities |
87
-
|[Improve Prompts/Instructions](.github/ISSUE_TEMPLATE/prompt-update.yml)| Contribute improvements to the AI guidance system |
|[Request new CodeQL Query](.github/ISSUE_TEMPLATE/query-create.yml)| Create a new CodeQL query to detect specific code patterns or vulnerabilities |
88
+
|[Update existing CodeQL Query](.github/ISSUE_TEMPLATE/query-update.yml)| Modify an existing query to improve accuracy or add new detection capabilities |
89
+
|[Request new CodeQL Data Extension](.github/ISSUE_TEMPLATE/data-extension-create.yml)| Create a data extension (models-as-data YAML) to model an unmodeled library or framework |
90
+
|[Improve Prompts/Instructions](.github/ISSUE_TEMPLATE/prompt-update.yml)| Contribute improvements to the AI guidance system |
88
91
89
92
## Repository Structure
90
93
@@ -117,7 +120,7 @@ codeql-development-template/
117
120
118
121
This template implements a **hierarchical prompt system** that maximizes GitHub Copilot's effectiveness:
119
122
120
-
1.**Issue Templates** provide structured input for query requirements
123
+
1.**Issue Templates** provide structured input for query and model requirements
121
124
2.**Language-Specific Instructions** guide Copilot with relevant context
122
125
3.**High-Level Prompts** break down complex CodeQL workflows
123
126
4.**Tool-Specific Resources** provide CLI usage examples and patterns
@@ -135,18 +138,20 @@ See [PROMPTS.md](PROMPTS.md) for details on the prompt hierarchy system.
135
138
136
139
## Supported Languages
137
140
138
-
The template supports CodeQL query development for:
139
-
140
-
| Language | CodeQL Library |
141
-
| --------------------- | -------------- |
142
-
| GitHub Actions |`actions`|
143
-
| C/C++ |`cpp`|
144
-
| C# |`csharp`|
145
-
| Go |`go`|
146
-
| Java |`java`|
147
-
| JavaScript/TypeScript |`javascript`|
148
-
| Python |`python`|
149
-
| Ruby |`ruby`|
141
+
CodeQL supports the following languages. This template provides query development and/or data extension (models-as-data) guidance for each:
142
+
143
+
| Language | CodeQL Library | Query Development | Model Development |
0 commit comments