what is the purpose of the source code build by java,maven,gradle?

[zplovekq]

Thanks for your paper and code.
I want to ask question about that why we need build the source code with java,maven,gradle?
What is the purpose and benifit of the source java code combile about The static analysis ?
Looking forward for your reply!

[clairew]

Hi - in general you need to build your project before creating a CodeQL database for it. More docs here

CodeQL has automatic build detection or users can provide specific build commands.

We provided instructions for building specific build commands for the projects in our Java benchmark cwe-bench-java. You don't have to follow them.

Is there a specific use case you're trying to use Iris for?

[zplovekq]

Thanks for your reply！
So the compile is the requirements for CodeQL?
i think, in the real world if the project can be auto-analyze-vulnerabilities only by source code(not need to combile) is more cool. Can other code static analysis tool like javaParser、tree-siter can replay codeql with the iris method？
Looking forward for your apply!