How is CodeQL different from other static analysis tools?

A Itremoves insecure code automatically

B. It allows querying of code semantics using a database-like language.

C. It only works for open-source projects.

D. It runs analysis only after a security breach.