Scan from the command line

To get started with the CodeQL CLI, you need to download and set up the CLI so that it can access the tools and libraries required to create and analyze databases.

You can modify your CodeQL CLI setup to use a local checkout of the CodeQL repository for analysis, set up multiple versions of the CodeQL CLI, and analyze databases you have downloaded from GitHub.

You can write your own CodeQL queries to find specific vulnerabilities and errors.

Verify your custom CodeQL queries and catch breaking changes before they affect your code scanning results following new releases of the CodeQL CLI.

You can use the CodeQL CLI to preview your query help files as Markdown and ensure they are valid.

Save time by adding your frequently used command options and custom CodeQL packs to a CodeQL configuration file.

You can create a database bundle with CodeQL troubleshooting information.