What is a CodeQL query pack and what is its role in scanning?

What is a CodeQL query pack and what is its role in scanning?

• A. A CodeQL query pack is a single query file used for a quick scan.
• B. A CodeQL query pack is a runtime library for executing queries.
• C. A CodeQL query pack is a collection of CodeQL queries used to analyze code; packs can be language-specific and extended with custom queries.
• D. A CodeQL query pack is a portable container for dependencies.

Answer: (C)

In CodeQL, a query pack is a packaged collection of CodeQL queries and related libraries that you run together to analyze code. Packs are often language-specific, with separate packs for languages like JavaScript, Python, or Java, and you can extend them by adding your own queries or by creating new packs that depend on existing ones. When you run a scan, CodeQL loads the relevant packs for the language being analyzed and executes the queries contained in them against the codebase, producing findings. This packaging makes it easy to reuse checks across projects and tailor scans by mixing in custom queries, rather than relying on a single, standalone query.

In CodeQL, a query pack is a packaged collection of CodeQL queries and related libraries that you run together to analyze code. Packs are often language-specific, with separate packs for languages like JavaScript, Python, or Java, and you can extend them by adding your own queries or by creating new packs that depend on existing ones. When you run a scan, CodeQL loads the relevant packs for the language being analyzed and executes the queries contained in them against the codebase, producing findings. This packaging makes it easy to reuse checks across projects and tailor scans by mixing in custom queries, rather than relying on a single, standalone query.