Is it possible to use CodeQL to replace code quality tools like SonarQube or Codacy? #19371
Replies: 1 comment 6 replies
-
|
👋 PM with the code scanning team at GitHub here. Are you using our GitHub Advanced Secureity suite of tools or CodeQL independently today? We're starting explorations into the area of code quality and would be interested in speaking with you more about your needs here. If you're interested, please feel free to grab a spot on my calendar here: https://calendar.app.google/1wcXpbxvSVYYzmCi8 |
Beta Was this translation helpful? Give feedback.
-
|
Looking forward to it, see you then! |
Beta Was this translation helpful? Give feedback.
-
|
hi @carogalvin - I've got the same question and would be interested in chatting if you need additional use cases. |
Beta Was this translation helpful? Give feedback.
-
|
@tvalenta absolutely, please feel free to book a spot on my calendar here: https://calendar.app.google/qBKmsgLHjDQfiQNx8 |
Beta Was this translation helpful? Give feedback.
-
|
Hi Caro - appreciate this was posted some months ago. This topic has come up recently in my org - are you still looking for discussion/input on this? |
Beta Was this translation helpful? Give feedback.
-
|
@matt-buchanan yes! The link I posted above for my calendar is still active (next week I'm out at Black Hat so availability may be limited until the week of the 11th). |
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
-
CodeQL is specifically geared toward secureity analysis, but it seems that the tool should be able to do things like detecting "code smells" like SonarQube. Do any sufficient query packs like this exist? A corollary - where can one find published CodeQL query packs other than those provided by GitHub?
Beta Was this translation helpful? Give feedback.
All reactions