github / codeql

Watch 60
Star 1.3k
Fork 339

Code
Issues 162
Pull requests 118
Actions
Projects
Security
Insights

Code
Issues
Pull requests
Actions
Projects
Security
Insights

Labels 24 Milestones 4

New pull request New

118 Open 3,455 Closed

Author

Filter by author

Label

Filter by label

Use alt + click/return to exclude labels.

Projects

Filter by project

Milestones

Filter by milestone

Reviews

Filter by reviews

No reviews Review required Approved review Changes requested

Assignee

Filter by who’s assigned

Sort

Sort by

Newest Oldest Most commented Least commented Recently updated Least recently updated

Most reactions

Java: Add exec sinks with array arguments.

Java

#4051 opened Aug 12, 2020 by aschackmull • Review required

Learning CodeQL docs: update links to match GitHub docs style

#4046 opened Aug 11, 2020 by jf205 • Review required

C++: Model more of std::string in models.

C++

#4045 opened Aug 11, 2020 by geoffw0 • Review required

Java: Add PrintWriter.format as XSS sink.

Java

#4044 opened Aug 11, 2020 by aschackmull • Review required

JS: Add support for TypeScript 4

#4043 opened Aug 11, 2020 by erik-krogh • Draft 3 of 8

Java: Make XssSink extensible.

Java

#4042 opened Aug 11, 2020 by aschackmull • Review required

C#: upgrade Roslyn dependencies to version 3.7

#4041 opened Aug 11, 2020 by tamasvajk • Review required

Fix typo

#4039 opened Aug 10, 2020 by intrigus-lgtm • Approved

C#: AST printing

#4038 opened Aug 10, 2020 by tamasvajk • Changes requested

Java test parameterised modules impact on dataflow

#4037 opened Aug 10, 2020 by aschackmull • Draft

C++: Clarify the docs on DataFlow::Node::asExpr

C++

#4032 opened Aug 7, 2020 by jbj • Review required

Add additional Hibernate SQL sinks

#4031 opened Aug 7, 2020 by aibaars • Draft

JS: Precise data-flow for returns from async functions

#4019 opened Aug 6, 2020 by erik-krogh • Review required

C#: Remove assembly prefixes from TRAP labels

#4017 opened Aug 5, 2020 by hvitved • Draft

Python: Shared dataflow: Content flow

Python

#4013 opened Aug 4, 2020 by yoff • Draft

JS: rename `getId()` to `getIdentifier()`

#4012 opened Aug 4, 2020 by erik-krogh • Approved

C#: Move ASP extraction from auto builder to `pre-finalize.{sh,cmd}`

#4011 opened Aug 4, 2020 by hvitved • Draft

Java: Extract module HardcodedCredentials from CWE-798

#3992 opened Jul 30, 2020 by rvermeulen • Draft

Python: Dataflow, test magic methods

Python

#3981 opened Jul 27, 2020 by yoff • Review required

JavaScript: Make access paths more reusable

#3980 opened Jul 27, 2020 by max-schaefer • Approved

[javascript] CodeQL query to detect if cookies are sent without the flag secure being set

#3978 opened Jul 26, 2020 by dellalibera • Changes requested

[JS] cwe-327 (Weak or vulnerable cryptography usage) added

#3977 opened Jul 26, 2020 by monkey-junkie • Review required

Docs: Query classification and display

#3974 opened Jul 24, 2020 by owen-mc • Review required

Python: Add type tracker and step summary implementation.

Python

#3961 opened Jul 17, 2020 by tausbn • Draft

Python: more call graph tracing

Python

#3953 opened Jul 16, 2020 by RasmusWL • Review required

Previous 1 2 3 4 5 Next

Previous Next

ProTip! Add no:assignee to see everything that’s not assigned.