Add support for PowerShell as a supported language in CodeQL

[kilasuit]

Whilst PowerShell is built on top of C# and can use as well as F# as well as other .NET languages quite easily, it would be nice ot be able to analyse PowerShell using codeql tooling in future

[jketema]

Hi @kilasuit. Thanks for the suggestion. We'll take it into consideration.

[intrigus-lgtm]

Interestingly, there is a PowerShell extractor in a Microsoft fork of CodeQL:
https://github.com/microsoft/codeql/tree/main/powershell
I guess @MathiasVP can probably tell you more about it.

[MathiasVP]

Interestingly, there is a PowerShell extractor in a Microsoft fork of CodeQL:

https://github.com/microsoft/codeql/tree/main/powershell

I guess @MathiasVP can probably tell you more about it.

Thanks for the ping 🙂

Yes, Microsoft is currently working on supporting PowerShell as a CodeQL language. So far I've open sourced the existing extractor and created most of the required analysis libraries necessary to do global taint-tracking. Very few queries exist at the moment though. That's the next milestone! 🤞

You can find all of that in the repo @intrigus-lgtm linked above.

I imagine it's possible to build everything outside of the Microsoft context, but since this is not an actual GitHub product I would't recommend this as we may make breaking changes without any warnings.