Query your codebase using CodeQL
Benjamin Muskalla 
JDD 2021 CodeQL enables you to query your codebase as though it were data. Engineers and architects can leverage CodeQL to find security vulnerabilities using either CodeQL directly or using the deep integration with GitHub. On top of the built-in queries, developers can use CodeQL to write custom queries for their (polyglot) codebase and share them with the rest of the team. CodeQL is currently able to query codebases in C/C++, C#, Java, JavaScript and Python and is being developed by the GitHub Security Lab. In the talk, we’ll learn about the basic usage of CodeQL, the rich query language and how to write your own query.