# codeql を Homebrew Cask でインストール

codeql のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

## インストール

```sh
sudo av install cask:codeql
```

追加のインストールコマンド:

### macOS

- Homebrew Cask (100%):

```sh
brew install --cask codeql
```

  証拠: local Homebrew cask metadata

## パッケージ情報

- **パッケージキー:** cask:codeql
- **パッケージマネージャ:** Homebrew Cask
- **バージョン:** 2.26.2
- **ソース概要:** Semantic code analysis engine
- **ホームページ:** <https://codeql.github.com/>
- **最終更新:** 2026-07-29T16:12:41Z
- **生成日時:** 2026-08-03T19:37:03+00:00

## 実行可能ファイル

- codeql (バイナリ)
- codeql (エイリアス)

## インストール挙動

- Bottle: 利用不可

## バージョンと鮮度

- ページ生成日: 2026-08-03
- マネージャ版: 2.26.2
## プロジェクトの歴史と使われ方

CodeQL is GitHub's semantic code analysis engine and query language, packaged for command-line use through the CodeQL CLI. It is used for code scanning, security research, custom queries, and CI analysis.

### プロジェクトの歴史

CodeQL originated at Semmle, whose semantic analysis technology was acquired by GitHub in 2019. GitHub subsequently made CodeQL central to GitHub Advanced Security and to code scanning workflows, with the CLI distributed from GitHub-controlled release repositories.

### 採用の歴史

Adoption moved from security research and Semmle users into GitHub's hosted code scanning product, GitHub Actions workflows, and enterprise security programs. The CLI remains important for users who need local analysis, custom queries, alternative CI systems, or prebuilt CodeQL databases.

### 使われ方

The CLI creates CodeQL databases, runs queries, analyzes code, produces SARIF results, manages CodeQL packs, and uploads results to GitHub code scanning. GitHub recommends the CodeQL bundle because it includes the CLI plus compatible queries and libraries.

### パッケージ好きにとっての重要性

Package nerds care because the Homebrew cask wraps a large, versioned security-analysis toolchain that is otherwise commonly installed from GitHub release bundles. Its formula/cask packaging makes CodeQL feel like a normal terminal tool despite its bundled queries, extractors, and platform-specific binaries.

### タイムライン

- 2019: GitHub creates the codeql-cli-binaries repository for CLI binaries.
- 2019: GitHub acquires Semmle, bringing CodeQL into GitHub.
- 2020: CodeQL becomes a core part of GitHub code scanning and Advanced Security workflows.
- 2026: Homebrew cask distributes CodeQL CLI 2.25.6.

### Related projects

- Related projects include github/codeql for queries and libraries, github/codeql-action for GitHub Actions integration, GitHub code scanning, SARIF tooling, and CodeQL for Visual Studio Code.

### ソース

- <https://github.com/github/codeql-cli-binaries>
- <https://docs.github.com/en/code-security/codeql-cli>
- <https://docs.github.com/api/article/body?pathname=/en/code-security/how-tos/find-and-fix-code-vulnerabilities/scan-from-the-command-line/set-up-codeql-cli>
- <https://formulae.brew.sh/api/cask/codeql.json>


## セキュリティノート

codeql に一致するローカルシークレット処理マニフェストは見つかりませんでした。将来の対応で安定したパッケージ URL を使えるよう、Nucleus パッケージメタデータはここに公開されています。


## 他のパッケージマネージャ記録

- Nix - codeql: normalized package name match | nixpkgs package indexes: pkgs/by-name/co/codeql/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Scoop - main/codeql: normalized package name match | Scoop official bucket manifest trees: bucket/codeql.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1


## Combined YAML source

View the package source record on GitHub. [combined/codeql.yml](https://github.com/mxcl/pkgdb/blob/main/combined/codeql.yml)


## ソース

- pkg.so package database
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph