CodeQL KCL

The repository contains the standard CodeQL libraries and queries that power KCL code security.

Developing

• Install CodeQL CLI
• Install Kcl Java Lib

Extractor

Build

1. Run make in the lib/java directory of KCL lib, and place the generated libkcl_lib_jni.dylib file into your project.
2. Import the codeql.jar, located at codeql/tools/codeql.jar.
3. Put your kcl code into data/project.

Output

• data/report: The output generated by the extractor, with AST JSON files in the extend folder.
• data/database: The generated database.