Which tool is used to test CodeQL queries locally before pushing to GitHub?

• A. CodeQL CLI
• B. GitHub Desktop
• C. Docker Swarm
• D. npm

Answer: (A)

CodeQL queries are tested locally with the CodeQL CLI because it provides the exact tooling needed to run and validate queries against a local CodeQL database. You can generate a database from your code, execute your queries, and inspect the results to ensure they behave as you expect before sending them to GitHub. This local workflow lets you iteratively refine patterns, verify language coverage, and reproduce findings without relying on Git push workflows. The CodeQL CLI supports running individual queries or entire suites and works across languages, which makes it the right tool for validating queries prior to integrating with GitHub Advanced Security. Other options don’t fit this task: GitHub Desktop is just a Git client, Docker Swarm is for container orchestration, and npm is a package manager—none of these test CodeQL queries locally.