Tools
| Tool | Version | Purpose |
|---|---|---|
| CodeQL CLI | Latest | Bundle query packs for the create analysis API call. |
| sarif-sql | Latest | Download SARIF artifacts and transform them to SQLite. |
| mrva-prep | Latest | Index, pre-aggregate, and compress the SQLite database. |
| jq | 1.6+ | Construct the JSON payload for the create analysis API call. |
| curl | 7.x+ | Submit the API request. |
| .NET SDK | 10.0 | Build the Blazor WebAssembly report (local development only). |
sarif-sql and mrva-prep are distributed as standalone binaries, so no Go toolchain is required.