When using CodeQL, how does extraction for compiled languages work?

The correct answer is B. by monitoring the normal build process. For compiled languages, CodeQL performs extraction bymonitoring the normal build process. This means it watches your usual build commands (like make, javac, or dotnet build) and extracts the relevant data from the actual build steps being executed. CodeQL uses this information…

Configure and use Code Scanning with CodeQL

Question

Options

Aby resolving dependencies to give an accurate representation of the codebase
Bby monitoring the normal build process
Cby running directly on the source code
Dby generating one language at a time

How the community answered

(27 responses)

A
4% (1)
B
93% (25)
D
4% (1)

Explanation

For compiled languages, CodeQL performs extraction bymonitoring the normal build process. This means it watches your usual build commands (like make, javac, or dotnet build) and extracts the relevant data from the actual build steps being executed. CodeQL uses this information to construct a semantic database of the application. This approach ensures that CodeQL captures a precise, real-world representation of the code and its behavior as it is compiled, including platform-specific configurations or conditional logic used during build.

Topics

#CodeQL#Extraction#Compiled languages#Build process

Community Discussion

No community discussion yet for this question.

Full GH-500 Practice