I setup codeql locally to do some simple taint analysis recently. I found the tooling very powerful but quite complex to use. Updating the codeql database after making code changes was quite slow as well which made it harder to do incremental analysis.Can't imagine the complexities involved with quantum computing code analysis.