C++: MISRA via GitHub CodeQL?

[AlexanderLanin]

Evaluate GitHub CodeQL and Alternatives for MISRA C++17 Compliance

• Presentation: Prepare a walkthrough demonstrating how CodeQL is set up, used, and integrated into workflows. Focus on user experience aspects, such as whether it can be run locally or only in pull requests, and how developers interact with it.
• MISRA Coverage Report: Evaluate the extent to which GitHub CodeQL supports MISRA C++17 rules. Roughly document which rules are covered, any gaps, and possible workarounds.
• Licensing Investigation: Investigate and document the licensing terms for using GitHub CodeQL, specifically for MISRA compliance. Include details on any limitations or additional costs for both the score project and commercial usage.
• Evaluation of Alternatives: Identify and evaluate free tools for MISRA compliance. Assess whether standard open-source C++ checkers (e.g., cppcheck, Clang-Tidy) can be configured or extended for MISRA rules and whether they provide reasonable coverage (e.g., >20% of the MISRA C++17 standard).