Using CodeQL code scanning with your existing CI system

The CodeQL runner allows you to use your existing CI system to run CodeQL code scanning.

Code scanning is available for all public repositories, and for private repositories owned by organizations where GitHub Advanced Security is enabled. For more information, see "About GitHub Advanced Security."

About CodeQL code scanning in your CI system→

You can analyze your code with CodeQL in a third-party continuous integration system and upload the results to GitHub. The resulting code scanning alerts are shown alongside any alerts generated within GitHub.

Running CodeQL CLI in your CI system→

You can use the CodeQL CLI to perform CodeQL code scanning in a third-party continuous integration system.

Running CodeQL runner in your CI system→

You can use the CodeQL runner to perform CodeQL code scanning in a third-party continuous integration system.

Configuring CodeQL runner in your CI system→

You can configure how the CodeQL runner scans the code in your project and uploads the results to GitHub.

Troubleshooting CodeQL runner in your CI system→

If you're having problems with the CodeQL runner, you can troubleshoot by using these tips.