github / codeql Public

Notifications
Star 3.4k
Fork 721

Code
Issues 326
Pull requests 156
Discussions
Actions
Projects
Security
Insights

Code
Issues
Pull requests
Discussions
Actions
Projects
Security
Insights

Labels 34 Milestones 8

New pull request New

156 Open 5,512 Closed

Author

Filter by author

Label

Filter by label

Use alt + click/return to exclude labels

or ⇧ + click/return for logical OR

Projects

Filter by project

Milestones

Filter by milestone

Reviews

Filter by reviews

No reviews Review required Approved review Changes requested

Assignee

Filter by who’s assigned

Sort

Sort by

Newest Oldest Most commented Least commented Recently updated Least recently updated

Most reactions

Update CSV framework coverage reports

#6784 opened Oct 1, 2021 by github-actions bot • Review required

Python: Model FastAPI

documentation Python

#6782 opened Sep 30, 2021 by RasmusWL • Draft

JS: Move LDAP injection out of experimental

documentation JS

#6781 opened Sep 30, 2021 by erik-krogh • Draft

Data flow: Prevent "fluent summary flow" when it will result in a flow loop

C# C++ Java Python

#6780 opened Sep 30, 2021 by hvitved • Draft

Java: CWE-927 - Query to detect the use of implicit PendingIntents

documentation Java

#6779 opened Sep 30, 2021 by atorralba • Review required

Data flow: Rework SummarizedCallable::clearsContent/2

C# C++ Java Python

#6777 opened Sep 29, 2021 by hvitved • Review required

Python: Model asyncpg

documentation Python

#6776 opened Sep 29, 2021 by yoff • Changes requested

Java: Add models for java.util.stream.

Java

#6770 opened Sep 28, 2021 by aschackmull • Draft

Dataflow: Support side-effects for callbacks in summaries.

C# Java

#6767 opened Sep 28, 2021 by aschackmull • Review required

Python/JS: Recognize SHA-3 hash functions

JS Python

#6761 opened Sep 27, 2021 by RasmusWL • Approved

JS: extract regexp literals for string concatenations

Awaiting evaluation depends on internal PR JS

#6756 opened Sep 24, 2021 by erik-krogh • Draft

Java: Fix more performance issues with future versions of codeql.

Java no-change-note-required

#6755 opened Sep 24, 2021 by alexet • Review required

Python: model os path file accesses

Python

#6741 opened Sep 23, 2021 by yoff • Changes requested

Java: Model Android Bundle and Intent extras methods

Java

#6739 opened Sep 23, 2021 by joefarebrother • Review required

JS: track flow through string replace calls that just replace single chars for js/polynomial-redos

#6736 opened Sep 22, 2021 by erik-krogh • Review required

JS/PY: do not filter away regular expressions with lookbehinds

JS Python

#6734 opened Sep 22, 2021 by erik-krogh • Approved

Java: Big Decimal DOS

documentation Java

#6730 opened Sep 22, 2021 by tonghuaroot • Review required

C++: Exclusion rules for system macros

C++ documentation

#6723 opened Sep 21, 2021 by jbj • Draft

Java: CWE-400 - Query to detect uncontrolled thread resource consumption

documentation Java

#6717 opened Sep 20, 2021 by luchua-bc • Review required

Java: Additional hardcoded credentials candidates 3rd-party api calls

Java

#6716 opened Sep 18, 2021 by bananabr • Review required

Yet another SSRF query for Javascript

documentation JS

#6714 opened Sep 17, 2021 by valeria-meli • Review required

C++: New query for 'Cleartext transmission of sensitive information'

C++ documentation

#6713 opened Sep 17, 2021 by geoffw0 • Review required

CPP: Add query for CWE-1041 Use of Redundant Code

C++ documentation

#6710 opened Sep 16, 2021 by ihsinme • Review required

Python: Promote py/regex-injection

documentation Python

#6693 opened Sep 14, 2021 by yoff • Changes requested

Java: Draft of CSV model generator

Java

#6664 opened Sep 10, 2021 by bmuskalla • Draft

Previous 1 2 3 4 5 6 7 Next

Previous Next

ProTip! Type g p on any issue or pull request to go back to the pull request listing page.