CodeQL

Tuning CodeQL Code Scanning: Query Suites, Custom Queries and SARIF

How to tune GitHub code scanning in early 2022: choosing CodeQL query suites, scoping paths, writing a custom query, and adding third-party SARIF results.