github / codeql

Watch 65
Star 1.4k
Fork 367

Code
Issues 172
Pull requests 110
Actions
Projects
Security
Insights

Code
Issues
Pull requests
Actions
Projects
Security
Insights

Labels 25 Milestones 4

New pull request New

110 Open 3,611 Closed

Author

Filter by author

Label

Filter by label

Use alt + click/return to exclude labels.

Projects

Filter by project

Milestones

Filter by milestone

Reviews

Filter by reviews

No reviews Review required Approved review Changes requested

Assignee

Filter by who’s assigned

Sort

Sort by

Newest Oldest Most commented Least commented Recently updated Least recently updated

Most reactions

JS: Extra taint-steps to support CVE

Awaiting evaluation JS documentation

#4231 opened Sep 8, 2020 by erik-krogh • Draft

C++: (WIP) Replace taint through `UnknownType` with `ArrayContent` dataflow

C++ WIP

#4230 opened Sep 8, 2020 by MathiasVP • Draft

C++: Add taint models for std::make_unique and std::make_shared

C++

#4229 opened Sep 8, 2020 by MathiasVP • Review required

C++: Support `(bool)x` and `!x` in SimpleRangeAnalysis

C++

#4227 opened Sep 8, 2020 by jbj • Review required

Python: Add missing 1.25 change notes

Python documentation

#4226 opened Sep 8, 2020 by RasmusWL • Changes requested 1.25

C#: Improve empty collection check to not report on collections with property writes

#4224 opened Sep 8, 2020 by tamasvajk • Draft

C++/Java/JS: Rename Block -> BlockStmt

C++ JS Java depends on internal PR documentation

#4222 opened Sep 8, 2020 by jbj • Approved

C++: Allow .inc files to be included

C++

#4221 opened Sep 7, 2020 by rajivshah3 • Review required

JS: recognize colon in command-prefixes for js/shell-command-constructed-from-input

JS documentation

#4220 opened Sep 7, 2020 by erik-krogh • Changes requested

[Java] Add QL for detecting Spring View Manipulation Vulnerabilities.

Java

#4214 opened Sep 5, 2020 by porcupineyhairs • Review required

C++: Improve performance of getExplicitlyConverted

C++

#4213 opened Sep 4, 2020 by rdmarsh2 • Review required

C#: Implement support for path transformers

#4212 opened Sep 4, 2020 by hvitved • Approved

C++: Fix performance in Iterator.qll

#4203 opened Sep 3, 2020 by rdmarsh2 • Review required

C#: range analysis

#4194 opened Sep 2, 2020 by tamasvajk • Draft

C#: Sign analysis

C# Java

#4193 opened Sep 2, 2020 by tamasvajk • Review required

Python script to generate lists of code scanning queries in CSV format

#4177 opened Sep 1, 2020 by sj • Changes requested

Python: Dataflow, Test that `pointsTo` implies data flow

Python

#4174 opened Sep 1, 2020 by yoff • Changes requested

Bump diff from 3.4.0 to 3.5.0 in /javascript/extractor/lib/typescript

dependencies

#4164 opened Aug 28, 2020 by dependabot bot • Review required

Bump js-yaml from 3.10.0 to 3.14.0 in /javascript/extractor/lib/typescript

dependencies

#4163 opened Aug 28, 2020 by dependabot bot • Review required

C++: Use IR alias analysis for field flow

C# C++

#4142 opened Aug 26, 2020 by MathiasVP • Approved

Update tests for extractor changes with ctors

C++ depends on internal PR

#4140 opened Aug 26, 2020 by matt-gretton-dann • Review required

C#: Skip `foreach` loop bodies in the CFG when the iteration expression is empty

#4139 opened Aug 26, 2020 by hvitved • Review required

C++: Output iterators in AST taint tracking

C++

#4135 opened Aug 25, 2020 by rdmarsh2 • Review required

Python: Shared dataflow, nested comprehensions

Python

#4132 opened Aug 25, 2020 by yoff • Approved

C++: x != 0 support in SimpleRangeAnalysis

C++

#4131 opened Aug 25, 2020 by lcartey • Draft

Previous 1 2 3 4 5 Next

Previous Next

ProTip! Add no:assignee to see everything that’s not assigned.