What is CodeQL?

• A. A database that represents your codebase and can be used to identify problems
• B. A code formatter
• C. A testing framework
• D. A project management tool

Answer: (A)

CodeQL turns your codebase into a semantic database of code facts—things like the structure of the code, how functions call each other, and how data flows. You can then write queries against that database to spot patterns that indicate vulnerabilities, bugs, or quality issues. It’s like giving you a powerful search engine over the code’s meaning, not just its text. This lets you identify problems across languages by applying precise checks rather than running tests or formatting code. It isn’t a code formatter, a testing framework, or a project management tool; those serve different purposes, while CodeQL provides a way to programmatically analyze code to find potential issues. You can use ready-made queries or author your own to tailor checks to your codebase.