In security analysis, what is a primary use of the CodeQL database?

• A. To represent the codebase and enable queries that identify potential problems
• B. To store user credentials
• C. To host a web application
• D. To manage container deployments

Answer: (A)

CodeQL databases are created to capture a codebase in a structured form that lets you run semantic queries to find security issues. The database encodes the program’s structure and relationships—such as the abstract syntax tree, control flow, and data flow—so you can write precise queries that identify risky patterns, insecure API usage, or data leaks. This makes it possible to systematically analyze code across languages and identify潜在 vulnerabilities, rather than just scanning text or running tests.

Storing user credentials, hosting a web application, or managing container deployments aren’t tasks of the CodeQL database. Those roles belong to data stores, application servers, or container orchestration tools, respectively.