# Installer codeql avec Homebrew Cask

Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de codeql pour les workflows d'agents IA.

## installation

```sh
sudo av install cask:codeql
```

Commandes d'installation supplémentaires:

### macOS

- Homebrew Cask (100%):

```sh
brew install --cask codeql
```

  Preuve: local Homebrew cask metadata

## Faits du paquet

- **Clé du paquet:** cask:codeql
- **Gestionnaire de paquets:** Homebrew Cask
- **Version:** 2.26.2
- **Résumé source:** Semantic code analysis engine
- **Page d'accueil:** <https://codeql.github.com/>
- **Dernière mise à jour:** 2026-07-29T16:12:41Z
- **Généré:** 2026-08-03T19:37:03+00:00

## exécutables

- codeql (binaire)
- codeql (alias)

## Comportement d'installation

- Bouteille: non disponible

## Version et fraîcheur

- page générée: 2026-08-03
- version du gestionnaire: 2.26.2
## Historique du projet et usages

CodeQL is GitHub's semantic code analysis engine and query language, packaged for command-line use through the CodeQL CLI. It is used for code scanning, security research, custom queries, and CI analysis.

### Historique du projet

CodeQL originated at Semmle, whose semantic analysis technology was acquired by GitHub in 2019. GitHub subsequently made CodeQL central to GitHub Advanced Security and to code scanning workflows, with the CLI distributed from GitHub-controlled release repositories.

### Historique d'adoption

Adoption moved from security research and Semmle users into GitHub's hosted code scanning product, GitHub Actions workflows, and enterprise security programs. The CLI remains important for users who need local analysis, custom queries, alternative CI systems, or prebuilt CodeQL databases.

### Modes d'utilisation

The CLI creates CodeQL databases, runs queries, analyzes code, produces SARIF results, manages CodeQL packs, and uploads results to GitHub code scanning. GitHub recommends the CodeQL bundle because it includes the CLI plus compatible queries and libraries.

### Pourquoi les passionnés de paquets s'y intéressent

Package nerds care because the Homebrew cask wraps a large, versioned security-analysis toolchain that is otherwise commonly installed from GitHub release bundles. Its formula/cask packaging makes CodeQL feel like a normal terminal tool despite its bundled queries, extractors, and platform-specific binaries.

### Chronologie

- 2019: GitHub creates the codeql-cli-binaries repository for CLI binaries.
- 2019: GitHub acquires Semmle, bringing CodeQL into GitHub.
- 2020: CodeQL becomes a core part of GitHub code scanning and Advanced Security workflows.
- 2026: Homebrew cask distributes CodeQL CLI 2.25.6.

### Related projects

- Related projects include github/codeql for queries and libraries, github/codeql-action for GitHub Actions integration, GitHub code scanning, SARIF tooling, and CodeQL for Visual Studio Code.

### Sources

- <https://github.com/github/codeql-cli-binaries>
- <https://docs.github.com/en/code-security/codeql-cli>
- <https://docs.github.com/api/article/body?pathname=/en/code-security/how-tos/find-and-fix-code-vulnerabilities/scan-from-the-command-line/set-up-codeql-cli>
- <https://formulae.brew.sh/api/cask/codeql.json>


## Notes de sécurité

Aucun manifest local de gestion des secrets correspondant n'a été trouvé pour codeql. Les métadonnées de paquet Nucleus restent publiées ici afin que la couverture future dispose d'une URL stable.


## Autres enregistrements de gestionnaires de paquets

- Nix - codeql: normalized package name match | nixpkgs package indexes: pkgs/by-name/co/codeql/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Scoop - main/codeql: normalized package name match | Scoop official bucket manifest trees: bucket/codeql.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1


## Combined YAML source

View the package source record on GitHub. [combined/codeql.yml](https://github.com/mxcl/pkgdb/blob/main/combined/codeql.yml)


## Sources

- pkg.so package database
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph