Codeql

This gets you set up with CodeQL scanning, whether you're configuring GitHub Actions workflows or running the CLI locally. The skill covers the practical stuff like choosing between default and advanced setup, configuring language matrices with proper build modes, and troubleshooting compiled language analysis. It includes specifics on SARIF output, monorepo scanning with categories, and the CLI workflow from database creation through results upload. The compiled language support table and build mode guidance are especially useful since that's where most setup issues happen. Good reference if you're moving beyond one-click default setup or need to run CodeQL outside of GitHub's hosted environment.

skills.sh installs: 2K
GitHub stars: 41K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add github/awesome-copilot --skill codeql --agent claude-code

Installs into .claude/skills of the current project.

Files

CodeQL Code Scanning

This skill provides procedural guidance for configuring and running CodeQL code scanning — both through GitHub Actions workflows and the standalone CodeQL CLI.

When to Use This Skill

Use this skill when the request involves:

Creating or customizing a codeql.yml GitHub Actions workflow
Choosing between default setup and advanced setup for code scanning
Configuring CodeQL language matrix, build modes, or query suites
Running CodeQL CLI locally (codeql database create, database analyze, github upload-results)
Understanding or interpreting SARIF output from CodeQL
Troubleshooting CodeQL analysis failures (build modes, compiled languages, runner requirements)
Setting up CodeQL for monorepos with per-component scanning
Configuring dependency caching, custom query packs, or model packs