# codeql mit Homebrew Cask installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für codeql in AI-Agent-Workflows.

## Installation

```sh
sudo av install cask:codeql
```

Weitere Installationsbefehle:

### macOS

- Homebrew Cask (100%):

```sh
brew install --cask codeql
```

  Evidenz: local Homebrew cask metadata

## Paketfakten

- **Paketschlüssel:** cask:codeql
- **Paketmanager:** Homebrew Cask
- **Version:** 2.26.2
- **Quellzusammenfassung:** Semantic code analysis engine
- **Homepage:** <https://codeql.github.com/>
- **Zuletzt aktualisiert:** 2026-07-29T16:12:41Z
- **Generiert:** 2026-08-03T19:37:03+00:00

## Executables

- codeql (Binärdatei)
- codeql (Alias)

## Installationsverhalten

- Bottle: nicht verfügbar

## Version und Aktualität

- Seite generiert: 2026-08-03
- Manager-Version: 2.26.2
## Projektgeschichte und Nutzung

CodeQL is GitHub's semantic code analysis engine and query language, packaged for command-line use through the CodeQL CLI. It is used for code scanning, security research, custom queries, and CI analysis.

### Projektgeschichte

CodeQL originated at Semmle, whose semantic analysis technology was acquired by GitHub in 2019. GitHub subsequently made CodeQL central to GitHub Advanced Security and to code scanning workflows, with the CLI distributed from GitHub-controlled release repositories.

### Adoptionsgeschichte

Adoption moved from security research and Semmle users into GitHub's hosted code scanning product, GitHub Actions workflows, and enterprise security programs. The CLI remains important for users who need local analysis, custom queries, alternative CI systems, or prebuilt CodeQL databases.

### Wie es verwendet wird

The CLI creates CodeQL databases, runs queries, analyzes code, produces SARIF results, manages CodeQL packs, and uploads results to GitHub code scanning. GitHub recommends the CodeQL bundle because it includes the CLI plus compatible queries and libraries.

### Warum Paket-Nerds sich dafür interessieren

Package nerds care because the Homebrew cask wraps a large, versioned security-analysis toolchain that is otherwise commonly installed from GitHub release bundles. Its formula/cask packaging makes CodeQL feel like a normal terminal tool despite its bundled queries, extractors, and platform-specific binaries.

### Zeitleiste

- 2019: GitHub creates the codeql-cli-binaries repository for CLI binaries.
- 2019: GitHub acquires Semmle, bringing CodeQL into GitHub.
- 2020: CodeQL becomes a core part of GitHub code scanning and Advanced Security workflows.
- 2026: Homebrew cask distributes CodeQL CLI 2.25.6.

### Related projects

- Related projects include github/codeql for queries and libraries, github/codeql-action for GitHub Actions integration, GitHub code scanning, SARIF tooling, and CodeQL for Visual Studio Code.

### Quellen

- <https://github.com/github/codeql-cli-binaries>
- <https://docs.github.com/en/code-security/codeql-cli>
- <https://docs.github.com/api/article/body?pathname=/en/code-security/how-tos/find-and-fix-code-vulnerabilities/scan-from-the-command-line/set-up-codeql-cli>
- <https://formulae.brew.sh/api/cask/codeql.json>


## Sicherheitshinweise

Für codeql wurde kein passendes lokales Secret-Handling-Manifest gefunden. Nucleus-Paketmetadaten bleiben hier veröffentlicht, damit künftige Abdeckung eine stabile Paket-URL hat.


## Andere Paketmanager-Einträge

- Nix - codeql: normalized package name match | nixpkgs package indexes: pkgs/by-name/co/codeql/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Scoop - main/codeql: normalized package name match | Scoop official bucket manifest trees: bucket/codeql.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1


## Combined YAML source

View the package source record on GitHub. [combined/codeql.yml](https://github.com/mxcl/pkgdb/blob/main/combined/codeql.yml)


## Quellen

- pkg.so package database
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph