Skip to content

Commit 353b50b

Browse files
aeisenbergfelicitymayjf205
authored
Apply suggestions from code review
Co-authored-by: Felicity Chapman <felicitymay@github.com> Co-authored-by: James Fletcher <42464962+jf205@users.noreply.github.com>
1 parent e14b803 commit 353b50b

File tree

5 files changed

+10
-16
lines changed

5 files changed

+10
-16
lines changed

docs/codeql/codeql-cli/about-codeql-packs.rst

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ You can use the package management commands in the CodeQL CLI to create CodeQL p
1616

1717

1818
The standard CodeQL packages for all supported languages are published in the `GitHub Container registry <https://github.com/orgs/codeql/packages>`__.
19-
The `CodeQL repository <https://github.com/github/codeql>`__ contains sources for the standard CodeQL packs for all supported languages.
19+
The `CodeQL repository <https://github.com/github/codeql>`__ contains source files for the standard CodeQL packs for all supported languages.
2020

2121
.. _codeql-pack-structure:
2222

@@ -38,13 +38,13 @@ When executing query-related commands, CodeQL first looks in siblings of the ins
3838
Then it checks the package cache for CodeQL packs which have been downloaded. This means that when you are developing queries locally, the local packages
3939
in the installation directory override packages of the same name in the package cache, so that you can test your local changes.
4040

41-
The metadata in each `qlpack.yml`` file tells
41+
The metadata in each ``qlpack.yml`` file tells
4242
CodeQL how to compile any queries in the pack, what libraries the pack depends on, and where to
4343
find query suite definitions.
4444

4545
The contents of the CodeQL pack (queries or libraries used in CodeQL analysis) is included in the same directory as ``qlpack.yml``, or its subdirectories.
4646

47-
The directory containing the ``qlpack.yml`` file serves as the root directory for the content of the CodeQL pack. That is, for all ``.ql`` and ``.qll`` files in the pack, CodeQL will resolve all import statements relative to the directory containing ``qlpack.yml`` at the pack's root.
47+
The directory containing the ``qlpack.yml`` file serves as the root directory for the content of the CodeQL pack. That is, for all ``.ql`` and ``.qll`` files in the pack, CodeQL will resolve all import statements relative to the directory containing the ``qlpack.yml`` file at the pack's root.
4848

4949
.. _codeqlpack-yml-properties:
5050

@@ -141,7 +141,7 @@ The following properties are supported in ``qlpack.yml`` files.
141141
upgrades: .
142142

143143
- Core language packs only
144-
- The path to a directory within the pack that contains database upgrade scripts, defined relative to the pack directory. Database upgrades are used internally to ensure a database created with a different version of the CodeQL CLI is compatible with the current version.
144+
- The path to a directory within the pack that contains database upgrade scripts, defined relative to the pack directory. Database upgrades are used internally to ensure that a database created with a different version of the CodeQL CLI is compatible with the current version of the CLI.
145145
* - ``authors``
146146
- .. code-block:: yaml
147147

@@ -212,7 +212,7 @@ In most cases, the ``codeql-pack.lock.yml`` file is only relevant for query pack
212212
Examples of custom CodeQL packs
213213
-------------------------------
214214

215-
When you write custom queries or tests, you should save them in custom CodeQL packs. For simplicity, try to organize each pack logically. For more information, see ""`CodeQL pack structure <#codeql-pack-structure>`__." Save files for queries and tests in separate packs and, where possible, organize custom packs into specific folders for each target language. This is particuarly useful if you intend to publish your CodeQL packs so they can be shared with others or used in GitHub `Code scanning <https://docs.github.com/en/code-security/secure-coding/automatically-scanning-your-code-for-vulnerabilities-and-errors/about-code-scanning>`__.
215+
When you write custom queries or tests, you should save them in custom CodeQL packs. For simplicity, try to organize each pack logically. For more information, see "`CodeQL pack structure <#codeql-pack-structure>`__." Save files for queries and tests in separate packs and, where possible, organize custom packs into specific folders for each target language. This is particuarly useful if you intend to publish your CodeQL packs so they can be shared with others or used in GitHub `Code scanning <https://docs.github.com/en/code-security/secure-coding/automatically-scanning-your-code-for-vulnerabilities-and-errors/about-code-scanning>`__.
216216

217217
CodeQL packs for custom libraries
218218
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

docs/codeql/codeql-cli/analyzing-databases-with-the-codeql-cli.rst

Lines changed: 2 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -58,8 +58,8 @@ You can also specify:
5858
- a path to a directory containing query files
5959
- a path to a query suite file
6060
- the name of a CodeQL query pack
61-
- with an optional version range
62-
- with an optional path to a query, directory, or query suite inside the pack
61+
- with an optional version range
62+
- with an optional path to a query, directory, or query suite inside the pack
6363

6464
If omitted, the default query suite for the language of the database being analyzed will be used. For more information, see the :ref:`examples <database-analyze-examples>` below.
6565

@@ -166,12 +166,6 @@ For example, to execute all Python queries contained in the ``Functions`` direct
166166

167167
codeql database analyze <python-database> ../ql/python/ql/src/Functions/ --format=sarif-latest --output=python-analysis/python-results.sarif
168168

169-
If you do not have the CodeQL repository checked out, you can execute the same queries by specifying the query pack name and the path to the queries::
170-
171-
codeql database analyze --download <python-database> codeql/python-queries:Functions/ --format=sarif-latest --output=python-analysis/python-results.sarif
172-
173-
Use the ``--download`` flag to download the query pack if it isn't yet available locally.
174-
175169
When the analysis has finished, a SARIF results file is generated. Specifying ``--format=sarif-latest`` ensures
176170
that the results are formatted according to the most recent SARIF specification
177171
supported by CodeQL.

docs/codeql/codeql-cli/query-reference-files.rst

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ Example
3939
A query reference file to test a JavaScript alert query:
4040
`DeadAngularJSEventListener.qlref <https://github.com/github/codeql/blob/main/javascript/ql/test/query-tests/AngularJS/DeadAngularJSEventListener/DeadAngularJSEventListener.qlref>`__
4141

42-
The `CodeQL pack <https://github.com/github/codeql/blob/main/javascript/ql/test/qlpack.yml>`__
42+
The ```qlpack.yml`` file <https://github.com/github/codeql/blob/main/javascript/ql/test/qlpack.yml>`__
4343
for the CodeQL pack at ``javascript/ql/test`` defines ``codeql/javascript-queries`` as
4444
a dependency. So the query reference file defines the location of the query relative
4545
to the ``codeql/javascript-queries`` CodeQL pack::

docs/codeql/codeql-cli/using-custom-queries-with-the-codeql-cli.rst

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -64,7 +64,7 @@ library files, query suites, and important metadata. Their root directory must
6464
contain a file named ``qlpack.yml``. Your custom queries should be saved in the
6565
CodeQL pack root, or its subdirectories.
6666

67-
For each CodeQL pack, the ``qlpack.yml`` file includes information that tells CodeQL
67+
For each CodeQL pack, the ``qlpack.yml`` file includes information that tells the CodeQL CLI
6868
how to compile the queries, which other CodeQL packs and libraries the pack
6969
depends on, and where to find query suite definitions. For more information
7070
about what to include in this file, see ":ref:`About CodeQL packs <codeqlpack-yml-properties>`."

docs/codeql/reusables/test-qlpack.rst

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,4 +6,4 @@
66
extractor: java
77
tests: .
88
9-
This ``qlpack.yml`` file states that ``my-github-user/my-query-tests`` depends on ``my-github-user/my-custom-queries`` at a version greater than or equal to 1.2.3 and less than 2.0.0. It also declares that the CLI should use the Java ``extractor`` when creating test databases. The ``tests: .`` line declares that all ``.ql`` files in the pack should be run as tests when ``codeql test run`` is run with the ``--strict-test-discovery`` option. Typically, test packs do not contain a ``version`` property. This prevents them from being inadvertently published.
9+
This ``qlpack.yml`` file states that ``my-github-user/my-query-tests`` depends on ``my-github-user/my-custom-queries`` at a version greater than or equal to 1.2.3 and less than 2.0.0. It also declares that the CLI should use the Java ``extractor`` when creating test databases. The ``tests: .`` line declares that all ``.ql`` files in the pack should be run as tests when ``codeql test run`` is run with the ``--strict-test-discovery`` option. Typically, test packs do not contain a ``version`` property. This prevents you from accidentally publishing them.

0 commit comments

Comments
 (0)