github / codeql

Watch 51
Star 1k
Fork 274

Code
Issues 134
Pull requests 112
Actions
Projects 0
Security
Insights

Code Issues 134 Pull requests 112 Projects 0 Actions Security Pulse

Labels 23 Milestones 3

New pull request New

112 Open 3,203 Closed

Author

Filter by author

Label

Filter by label

Use alt + click/return to exclude labels.

Projects

Filter by project

Milestones

Filter by milestone

Reviews

Filter by reviews

No reviews Review required Approved review Changes requested

Assignee

Filter by who’s assigned

Sort

Sort by

Newest Oldest Most commented Least commented Recently updated Least recently updated

Most reactions

Java: Unsafe resource loading in Android webview

#3706 opened Jun 12, 2020 by luchua-bc • Review required

JS: Step through path.{format,parse} and add model of Micro

#3704 opened Jun 12, 2020 by asgerf • Approved

JS: add query js/memory-exhaustion

#3702 opened Jun 12, 2020 by esbena • Approved

Python: Start using the shared data flow libraries

Python

#3701 opened Jun 12, 2020 by yoff • Draft 3 of 7

Remove VulnerablePackage.ql

#3700 opened Jun 12, 2020 by rneatherway • Review required

C++: Extend the GetsFunction and SystemFunction models.

C++

#3694 opened Jun 11, 2020 by geoffw0 • Review required

C++: Add tests of char* -> std::string -> char* conversions.

C++

#3693 opened Jun 11, 2020 by geoffw0 • Review required

JS: add simple query for detecting sensitive files downloaded over insecure connection

#3689 opened Jun 11, 2020 by erik-krogh 2 of 7

Java: Add Expr.getAnEnclosingStmt.

Java

#3687 opened Jun 11, 2020 by aschackmull • Review required

1 2

Java: Improve qldoc for JavadocTag.

Java

#3684 opened Jun 11, 2020 by aschackmull • Review required

Improve ast class reference for java

#3683 opened Jun 11, 2020 by owen-mc • Approved

JS: add new query: js/unclosed-stream

#3682 opened Jun 11, 2020 by esbena • Approved 0 of 3

[java] Merged with 3665 （https://github.com/github/codeql/pull/3665）

Java

#3674 opened Jun 10, 2020 by haby0 • Review required

C++: Add tests for taint through swap

C++

#3673 opened Jun 10, 2020 by MathiasVP • Review required

C++: Field flow through conflated ChiInstructions

C++

#3670 opened Jun 10, 2020 by MathiasVP • Draft

Create resolve-queries script

#3664 opened Jun 9, 2020 by jhutchings1 • Review required

JS: Add query to detect sensitive information flowing into compiled artifact

#3661 opened Jun 9, 2020 by erik-krogh 2 of 5

C++: Speed up IRGuardCondition::controlsBlock

C++

#3654 opened Jun 9, 2020 by jbj • Review required

Java: Improve modelling of Spring requests, flow steps and XSS sinks

#3653 opened Jun 9, 2020 by lcartey • Review required 0 of 3

C++: Fix data-flow dispatch perf with globals 1.24

C++

#3650 opened Jun 9, 2020 by jbj • Review required 1.24

[javascript] CodeQL query to detect missing origin validation in cross-origin communication via postMessage

#3646 opened Jun 8, 2020 by dellalibera • Review required

JS: Add PreCallGraphStep and use some array steps in type tracking

Awaiting evaluation JS

#3641 opened Jun 8, 2020 by asgerf • Draft 0 of 2

JS: Adds basic support for `webpack-dev-server` and importing from neighbouring packages.

Awaiting evaluation JS

#3630 opened Jun 5, 2020 by erik-krogh • Draft 0 of 3

Python: Fix points-to for unrelated modules with the same name.

Awaiting evaluation Python WIP

#3628 opened Jun 5, 2020 by tausbn • Changes requested

JS: Ignore returned exprs in defensive programming query

Awaiting evaluation JS

#3627 opened Jun 5, 2020 by asgerf • Review required

2 1

Previous 1 2 3 4 5 Next

Previous Next

ProTip! Add no:assignee to see everything that’s not assigned.