Why don't they reuse CodeQL to provide a true code search using maybe a subset of CodeQL capabilities?