Skip to main content
Wir veröffentlichen regelmäßig Aktualisierungen unserer Dokumentation, und die Übersetzung dieser Seite ist möglicherweise noch nicht abgeschlossen. Aktuelle Informationen findest du in der englischsprachigen Dokumentation.
All products
Codesicherheit

Built-in CodeQL query suites

In diesem Artikel

You can choose from different built-in CodeQL query suites to use in your CodeQL code scanning setup.

Code scanning ist für alle öffentlichen Repositorys auf GitHub.com verfügbar. Code scanning ist auch für private organisationseigene Repositorys verfügbar, die GitHub Enterprise Cloud nutzen und im Besitz einer Lizenz für GitHub Advanced Security sind. Weitere Informationen findest du unter Informationen zu GitHub Advanced Security.

About CodeQL query suites

With CodeQL code scanning, you can select a specific group of CodeQL queries, called a CodeQL query suite, to run against your code. The following built-in query suites are available through GitHub:

  • the default query suite.
  • the security-extended query suite.

Currently, both the default query suite and the security-extended query suite are available for the default setup for code scanning. For more information on the default setup, see "Konfigurieren der Codeüberprüfung für ein Repository."

To use a custom query suite, you must create an advanced setup for CodeQL code scanning. For more information on advanced setups and creating a query suite, see "Konfigurieren der Codeüberprüfung für ein Repository" and "Erstellen von CodeQL-Abfragesammlungen."

Built-in CodeQL query suites

The built-in CodeQL query suites, default and security-extended, are created and maintained by GitHub. Both of these query suites are available for every CodeQL-supported language. For more information on CodeQL-supported languages, see "Informationen zu Codescans mit CodeQL."

default query suite

  • The default query suite is the group of queries run by default in CodeQL code scanning on GitHub.
  • The queries in the default query suite are highly precise and return few false positive code scanning results. Relative to the security-extended query suite, the default suite returns fewer low-confidence code scanning results.
  • This query suite is available for use with the default setup for code scanning.

security-extended query suite

  • The security-extended query suite consists of all the queries in the default query suite, plus additional queries with slightly lower precision and severity.
  • Relative to the default query suite, the security-extended suite may return a greater number of false positive code scanning results.
  • This query suite is available for use with the default setup for code scanning.

Further reading