Exercise - Configure a CodeQL language matrix

In this lab, you will learn how to configure CodeQL analysis for multiple programming languages using a language matrix. When your repository contains code in multiple languages, you need to configure CodeQL to scan all of them. A language matrix allows you to efficiently scan multiple languages in parallel.

You will learn how to:

  • Understand CodeQL language support
  • Configure a language matrix
  • Scan multiple languages efficiently
  • Optimize CodeQL workflows
  • Review multi-language analysis results
  • Apply advanced CodeQL configurations

This lab takes approximately 30-45 minutes to complete.

Before you start

To complete the lab, you need:

  • A GitHub user account. If you don't have one, you can create a new account. If you need instructions on how to create a GitHub account, refer to the article Creating an account on GitHub.
  • Basic understanding of CodeQL and GitHub Actions.
  • Familiarity with multi-language projects.
  • A web browser with access to the internet.

Complete the exercise on GitHub

In this exercise, you'll configure a CodeQL language matrix through a hands-on exercise.

Note: This exercise demonstrates how to set up comprehensive code scanning for projects with multiple programming languages.

The exercise consists of the following activities:

  1. Start a web browser and navigate to the exercise repository: https://github.com/githubtraining/exercise-configure-codeql-language-matrix

  2. Follow the instructions provided in the repository's README to complete all the challenges.

  3. Work through each step in the exercise, configuring CodeQL to scan multiple languages.

    Note: A language matrix enables parallel scanning of different languages, making the analysis more efficient.

  4. When you finish all the challenges, you'll understand how to configure comprehensive multi-language code scanning.

What you've learned

After completing this exercise, you should be able to:

  • Understand CodeQL language support
  • Configure language matrices
  • Scan multiple languages efficiently
  • Optimize CodeQL workflows
  • Review multi-language results
  • Apply advanced CodeQL configurations

Congratulations! You've completed the CodeQL language matrix exercise!