Skip to main content

此版本的 GitHub Enterprise Server 将于以下日期停止服务 2026-04-09. 即使针对重大安全问题,也不会发布补丁。 为了获得更好的性能、更高的安全性和新功能,请升级到最新版本的 GitHub Enterprise。 如需升级帮助,请联系 GitHub Enterprise 支持

Exploring data flow with path queries

Detect potential vulnerabilities by running path queries and analyzing your data flow.

Prerequisites

Before you can effectively use path queries, you should understand the basics of data flow analysis. See About data flow analysis in the CodeQL documentation.

Running path queries in VS Code locally

  1. Open a path query in VS Code. A path query is a CodeQL query with the property @kind path-problem.
  2. Right-click in the window with the query open, then select CodeQL: Run Query on Selected Database. Alternatively, you can also run this from the VS Code Command Palette.
  3. Once the query has finished running, you can see the results in the "Results" view (under alerts in the dropdown menu). Each query result describes the flow of information between a source and a sink.
  4. Expand the result to see the individual steps that the data follows.
  5. Click each step to jump to it in the source code and investigate the problem further.

Next steps

To start writing your own path queries, see Creating path queries in the CodeQL documentation.