QL is an object-oriented dialect of Datalog for implementing high-level, declarative, reusable, yet efficient queries over complex, structured data. It is particularly well-suited for implementing program analyses, from elegant one-liners that spot shallow programming mistakes to elaborate whole-program data flow analyses that identify lurking security vulnerabilities. The power of QL is showcased on lgtm.com, where it is used to continuously analyse more than 50,000 open-source projects from GitHub and Bitbucket written in C++, C#, Java, JavaScript and Python.

This tutorial consists of two parts. In the first part, we will provide a technical overview of QL for the working static analysis developer, covering both the general principles of the language and its specific application to program analysis. The second part is a practical session where participants will be provided with access to a QL IDE, allowing them to implement their own analyses in QL and try them out on any of the projects on lgtm.com.

Tutorial instructions: https://tinyurl.com/y72decpa