What does the CodeQL setup step do in a Code Scanning workflow?

What does the CodeQL setup step do in a Code Scanning workflow?

• A. Runs the final report.
• B. Sets up CodeQL environment to run queries.
• C. Deletes previous CodeQL data.
• D. Configures external lints.

Answer: (B)

Setting up the CodeQL environment means preparing the tools the workflow will need to run queries. In a Code Scanning workflow, this step downloads and configures the CodeQL CLI and language packs on the runner, making CodeQL available for the next steps. It doesn’t run the analysis itself or generate the final report, and it doesn’t remove data or adjust external linters. By establishing the environment, it ensures that subsequent steps can initialize the specific languages and execute the queries needed to produce the results.

Setting up the CodeQL environment means preparing the tools the workflow will need to run queries. In a Code Scanning workflow, this step downloads and configures the CodeQL CLI and language packs on the runner, making CodeQL available for the next steps. It doesn’t run the analysis itself or generate the final report, and it doesn’t remove data or adjust external linters. By establishing the environment, it ensures that subsequent steps can initialize the specific languages and execute the queries needed to produce the results.