Running ALL queries

[ricardo-noyolalozano]

Howdy, I'm trying to run every single query that is in the repository.
This is my codeql-config file that my workflow is referencing:

name: "CodeQL config"
packs:
    javascript:
     - codeql/javascript-queries

    csharp:
     - codeql/csharp-queries

Doing -queries or -all does not get me all the queries in that folder. Notably I've been using the 'BaddCheckOdd.ql' as an indicator to see if it ran all of them and noticed that it never shows up in the logs. What is the pack that would give me the most extensive testing?

[jketema]

Hi @ricardo-noyolalozano

Thanks for your question. You generally do not want to run all the queries for two reasons: (1) this includes queries that are intended to only be run in the VSCode IDE, and (2) this would include experimental and low-precision queries and queries that have known performance problems. Unless you have specific reason to run any of those, I would recommend specifying either the security-extended or security-and-quality query suite in your workflow (see here), where security-and-quality is the most extensive of the two. This excludes the C# BadCheckOdd.ql query though, as it has low precision. Let me know if this helps.

[ricardo-noyolalozano]

Thank you, appreciate the quick response. I just wanted to have some simple code to make sure the code scanning was working but looks like the codebase was already being flagged.