1
0
mirror of synced 2025-12-19 18:10:59 -05:00

Clarify supported and unsupported languages for CodeQL: about-code-scanning-with-codeql.md (#55702)

Co-authored-by: Joe Clark <31087804+jc-clark@users.noreply.github.com>
This commit is contained in:
Jon Caveman
2025-05-19 18:47:42 -04:00
committed by GitHub
parent b96c7da1fe
commit 17e355bb35

View File

@@ -47,8 +47,13 @@ For information about {% data variables.product.prodname_code_scanning %} alerts
{% data variables.product.prodname_codeql %} supports both compiled and interpreted languages, and can find vulnerabilities and errors in code that's written in the supported languages.
{% data variables.product.prodname_codeql %} supports the following languages:
{% data reusables.code-scanning.codeql-languages-bullets %}
> [!IMPORTANT]
> {% data variables.product.prodname_codeql %} does **not** support languages that are not listed above. This includes, but is not limited to, **Rust**, **PHP**, **Scala**, and others. Attempting to use {% data variables.product.prodname_codeql %} with unsupported languages may result in no alerts being generated and incomplete analysis.
## Modeling custom or niche frameworks
{% data variables.product.github %} experts, security researchers, and community contributors write libraries to model the flow of data in popular frameworks and libraries. If you use custom dependencies that aren't modeled, then you can use the {% data variables.product.prodname_codeql %} extension for {% data variables.product.prodname_vscode %} to create models for these dependencies and use them to extend your analysis. For more information, see [AUTOTITLE](/code-security/codeql-for-vs-code/using-the-advanced-functionality-of-the-codeql-for-vs-code-extension/using-the-codeql-model-editor).