ChatGPT search suggests that CodeQL operates at the IL level for dotnet code.

In that case, can static analysis of F# be done to mark any vulnerablilites?

Please advise.

Thanks