When using CodeQL, how does extraction for compiled languages work?
For compiled languages, CodeQL performs extraction by monitoring the normal build process. This means it watches your usual build commands (like make, javac, or dotnet build) and extracts the relevant data from the actual build steps being executed. CodeQL uses this information to construct a semantic database of the application.
This approach ensures that CodeQL captures a precise, real-world representation of the code and its behavior as it is compiled, including platform-specific configurations or conditional logic used during build.
References: GitHub Docs -- CodeQL for compiled languages
==========
Currently there are no comments in this discussion, be the first to comment!