CodeQL 정리

mkdir ./fuck-ql cd ./fuck-ql wget https://github.com/github/codeql-cli-binaries/releases/download/v2.14.1/codeql-win64.zip unzip codeql-win64.zip 압축풀고 codeql-win64/codeql폴더를 fuck-ql/codeql-cli로 이름이랑 위치 바꿔 git clone https://github.com/github/codeql.git codeql-repo .\codeql-cli\codeql resolve languages .\codeql-cli\codeql resolve qlpacks git clone --depth=1 https://github.com/DevSlop/Pixi.git Pixi mdkir codeql-db # 데이터 베이스 생성 ./codeql-cli/codeql database create codeql-db\Pixi --language=javascript --source-root=Pixi # 선택한 쿼리로 codeql분석 ./codeql-cli/codeql database analyze codeql-db\Pixi codeql-repo\javascript\ql\src\Security\CWE-079\ReflectedXss.ql --format=csv --output=Pixi.ReflectedXss.csv