Instructions to use Codeql

[AhmadALBarqawi]

Hello guys, I am new to codeql and would like to use it in order to get analysis reports of individual python files, I am trying to see what and how many CWEs are in each python file. Can you guys provide me with information on how I would be able to create databases for these files (which are located locally on my computer)? and also if there are already queries setup to use against these codebases to check for all python CWEs that are detectable by codeql?

[aibaars]

The documentation can be found at https://codeql.github.com/docs/ . For local use the CodeQL CLI section is a good starting point. The main commands you need are codeql database create and codeql database analyze. For your use-case I'd recommend the python-security-extended query set.

[aibaars]

What do you mean by the "queries" folder? The CWE table on https://codeql.github.com/codeql-query-help/python-cwe/ contains the query identifiers. You should be able to find all of them in https://github.com/github/codeql/tree/main/python/ql/src . Some of them might be "experimental" and not part of the set of queries that get run by default.

[AhmadALBarqawi]

Exactly, I can't find all the CWEs mentioned here https://codeql.github.com/codeql-query-help/python-cwe/ in the folder https://github.com/github/codeql/tree/main/python/ql/src. An example would be CWE-668.

[AhmadALBarqawi]

Another question I have is whether I can change the output of the csv file to also include the CWE name and number?

[aibaars]

I don't think the CSV output contains that information, however, the SARIF output (--format=sarifv2.1.0) includes all that information.

[AhmadALBarqawi]

Thank you for that, using the sarif format is definitely much better. My earlier question remains as I am unable to find a folder in the source files for each CWE supposedly covered by CodeQL.