Skip to content

Configure and use Code Scanning with CodeQL Questions

Practice questions for Configure and use Code Scanning with CodeQL topic in GitHub Advanced Security. 49 questions covering this domain.

49 questions12 easy25 medium12 hard
Q1
easy

Which built-in CodeQL query suite is designed to be more precise and return fewer false positives?

Q2
medium

What happens if a repository switches from advanced setup to default setup for CodeQL?

Q3
hard

An organization assigns a self-hosted runner to a repository that already uses code scanning default setup. What must be done before default setup sta...

Q4
easy

If a third-party analysis tool wants to upload results to GitHub code scanning, which output format must it provide?

Q5
medium

Which prerequisite combination makes a repository eligible for code scanning default setup?

Q6
hard

A repository enables default setup, but analyses fail for every CodeQL-supported language in the repository. What happens next?

Q7
medium

When can a code scanning alert appear directly in a pull request?

Q8
medium

What extra insight do CodeQL data-flow alerts provide?

Q9
medium

If a CodeQL alert has both a general `severity` and a `security severity`, which value does GitHub display and use in preference?

Q10
easy

Which code type is included in the list of CodeQL-supported languages?

Q11
medium

A maintainer wants a single place to inspect code scanning coverage, see tool-specific error messages, and download CSV reports of analyzed files or r...

Q12
hard

A workflow uploads two SARIF result files from the same tool using the same category in one run. What should the author expect?

Q13
easy

Which language is currently supported by CodeQL on GitHub?

Q14
medium

What version family of SARIF does GitHub code scanning support for uploads?

Q15
hard

A team enabled CodeQL default setup and later assigned self-hosted runners with the code-scanning label, but default setup still does not use them. Wh...

Q16
easy

Under CodeQL default setup, which branch push events are scanned by default?

Q17
medium

What recurring schedule does CodeQL default setup add automatically?

Q18
medium

A third-party scanner uploads SARIF directly through the API and duplicate alerts appear between runs. Which data is most important for stable dedupli...

Q19
medium

A repository wants more built in CodeQL coverage than the default suite provides. Which suite adds lower precision and lower severity queries?

Q20
medium

A team wants to define its own CodeQL suite file instead of using only built in suites. What setup type is required?

Sign in to see all 49 questions

Create a free account to browse all questions — completely free during our launch phase.