CodeQL databases can be created for Java without building the code, but Kotlin files are excluded unless the code is built.| GitHub Docs
The tool status page shows useful information about all of your code scanning tools. If code scanning is not working as you'd expect, the tool status page is a good starting point for debugging problems.| GitHub Docs
You can customize how your advanced setup scans the code in your project for vulnerabilities and errors.| GitHub Docs
You can configure advanced setup for a repository to find security vulnerabilities in your code using a highly customizable code scanning configuration.| GitHub Docs