github / codeql Public

Notifications
Star 3.4k
Fork 723

Code
Issues 330
Pull requests 160
Discussions
Actions
Projects
Security
Insights

Code
Issues
Pull requests
Discussions
Actions
Projects
Security
Insights

Labels 34 Milestones 8

New pull request New

160 Open 5,517 Closed

Author

Filter by author

Label

Filter by label

Use alt + click/return to exclude labels

or ⇧ + click/return for logical OR

Projects

Filter by project

Milestones

Filter by milestone

Reviews

Filter by reviews

No reviews Review required Approved review Changes requested

Assignee

Filter by who’s assigned

Sort

Sort by

Newest Oldest Most commented Least commented Recently updated Least recently updated

Most reactions

Java: Remove overwritten NestedType.isStatic() QLDoc

Java

#6797 opened Oct 2, 2021 by Marcono1234 • Review required

Java: Deprecate PrimitiveType.getADefaultValue()

documentation Java

#6796 opened Oct 2, 2021 by Marcono1234 • Review required

Change class name in InlineExpectationTest to avoid clash

C++ Java Python

#6795 opened Oct 2, 2021 by owen-mc • Draft

C++: Improvements to cpp/improper-null-termination

C++ documentation

#6794 opened Oct 1, 2021 by geoffw0 • Review required

1 task

C++: Handle return value dereferences in ModelUtil.qll

C++

#6793 opened Oct 1, 2021 by MathiasVP • Review required

C#: Update nuget packages

#6791 opened Oct 1, 2021 by hvitved • Draft

Dataflow: Force high precision of certain Contents.

C# C++ Java Python

#6790 opened Oct 1, 2021 by aschackmull • Review required

JS: Restrict what PackageExports considers to be public

JS no-change-note-required

#6789 opened Oct 1, 2021 by asgerf • Approved

Python: Model FastAPI

documentation Python

#6782 opened Sep 30, 2021 by RasmusWL • Draft

JS: Move LDAP injection out of experimental

documentation JS

#6781 opened Sep 30, 2021 by erik-krogh • Review required

Data flow: Prevent "fluent summary flow" when it will result in a flow loop

C# C++ Java Python

#6780 opened Sep 30, 2021 by hvitved • Draft

Java: CWE-927 - Query to detect the use of implicit PendingIntents

documentation Java

#6779 opened Sep 30, 2021 by atorralba • Review required

Data flow: Rework SummarizedCallable::clearsContent/2

C# C++ Java Python

#6777 opened Sep 29, 2021 by hvitved • Review required

Python: Model asyncpg

documentation Python

#6776 opened Sep 29, 2021 by yoff • Changes requested

Java: Add models for java.util.stream.

Java

#6770 opened Sep 28, 2021 by aschackmull • Draft

Dataflow: Support side-effects for callbacks in summaries.

C# Java

#6767 opened Sep 28, 2021 by aschackmull • Review required

JS: extract regexp literals for string concatenations

Awaiting evaluation depends on internal PR JS

#6756 opened Sep 24, 2021 by erik-krogh • Draft

Python: model os path file accesses

Python

#6741 opened Sep 23, 2021 by yoff • Changes requested

Java: Model Android Bundle and Intent extras methods

Java

#6739 opened Sep 23, 2021 by joefarebrother • Review required

JS: track flow through string replace calls that just replace single chars for js/polynomial-redos

#6736 opened Sep 22, 2021 by erik-krogh • Review required

JS/PY: do not filter away regular expressions with lookbehinds

JS Python

#6734 opened Sep 22, 2021 by erik-krogh • Approved

Java: Big Decimal DOS

documentation Java

#6730 opened Sep 22, 2021 by tonghuaroot • Review required

C++: Exclusion rules for system macros

C++ documentation

#6723 opened Sep 21, 2021 by jbj • Draft

Java: CWE-400 - Query to detect uncontrolled thread resource consumption

documentation Java

#6717 opened Sep 20, 2021 by luchua-bc • Review required

Java: Additional hardcoded credentials candidates 3rd-party api calls

Java

#6716 opened Sep 18, 2021 by bananabr • Review required

Previous 1 2 3 4 5 6 7 Next

Previous Next

ProTip! Add no:assignee to see everything that’s not assigned.

Sep	OCT	Nov
	04
2020	2021	2022