github / codeql Public

Notifications
Star 3.4k
Fork 716

Code
Issues 327
Pull requests 155
Discussions
Actions
Projects
Security
Insights

Code
Issues
Pull requests
Discussions
Actions
Projects
Security
Insights

Labels 34 Milestones 8

New pull request New

155 Open 5,502 Closed

Author

Filter by author

Label

Filter by label

Use alt + click/return to exclude labels

or ⇧ + click/return for logical OR

Projects

Filter by project

Milestones

Filter by milestone

Reviews

Filter by reviews

No reviews Review required Approved review Changes requested

Assignee

Filter by who’s assigned

Sort

Sort by

Newest Oldest Most commented Least commented Recently updated Least recently updated

Most reactions

Java: Add models for java.util.stream.

Java

#6770 opened Sep 28, 2021 by aschackmull • Draft

Dataflow: Support side-effects for callbacks in summaries.

C# Java

#6767 opened Sep 28, 2021 by aschackmull • Review required

Python/JS: Recognize SHA-3 hash functions

JS Python

#6761 opened Sep 27, 2021 by RasmusWL • Approved

Increase precision to high for cpp/static-buffer-overflow

C++ depends on internal PR documentation

#6760 opened Sep 27, 2021 by andersfugmann • Review required

JS: extract regexp literals for string concatenations

Awaiting evaluation depends on internal PR JS

#6756 opened Sep 24, 2021 by erik-krogh • Draft

Java: Fix more performance issues with future versions of codeql.

Java

#6755 opened Sep 24, 2021 by alexet • Review required

Java: Avoid stubbing methods with private parameter types

Java no-change-note-required

#6748 opened Sep 24, 2021 by bmuskalla • Approved

Python: model os path file accesses

Python

#6741 opened Sep 23, 2021 by yoff • Changes requested

Java: Model Android Bundle and Intent extras methods

Java

#6739 opened Sep 23, 2021 by joefarebrother • Review required

Python: Add QLDoc to Function.getArgByName

no-change-note-required Python

#6738 opened Sep 23, 2021 by RasmusWL • Review required

JS: track flow through string replace calls that just replace single chars for js/polynomial-redos

#6736 opened Sep 22, 2021 by erik-krogh • Review required

JS/PY: do not filter away regular expressions with lookbehinds

JS Python

#6734 opened Sep 22, 2021 by erik-krogh • Approved

Java: Big Decimal DOS

documentation Java

#6730 opened Sep 22, 2021 by tonghuaroot • Review required

C++: Exclusion rules for system macros

C++ documentation

#6723 opened Sep 21, 2021 by jbj • Approved

Java: CWE-400 - Query to detect uncontrolled thread resource consumption

documentation Java

#6717 opened Sep 20, 2021 by luchua-bc • Review required

Java: Additional hardcoded credentials candidates 3rd-party api calls

Java

#6716 opened Sep 18, 2021 by bananabr • Review required

Yet another SSRF query for Javascript

documentation JS

#6714 opened Sep 17, 2021 by valeria-meli • Review required

C++: New query for 'Cleartext transmission of sensitive information'

C++ documentation

#6713 opened Sep 17, 2021 by geoffw0 • Review required

CPP: Add query for CWE-1041 Use of Redundant Code

C++ documentation

#6710 opened Sep 16, 2021 by ihsinme • Review required

Python: Promote py/regex-injection

documentation Python

#6693 opened Sep 14, 2021 by yoff • Changes requested

Java: Draft of CSV model generator

Java

#6664 opened Sep 10, 2021 by bmuskalla • Draft

Python: Import time dataflow

no-change-note-required

#6650 opened Sep 9, 2021 by yoff • Review required

JS: add jQuery writes to href/src as sinks in js/client-side-unvaledated-url-redirection

JS:changes-sources-or-sinks JS no-change-note-required

#6632 opened Sep 7, 2021 by erik-krogh • Draft

Java: Add CharacterLiteral.getCodePointValue()

Java

#6614 opened Sep 4, 2021 by Marcono1234 • Draft

Java: Split literals tests

Java

#6613 opened Sep 4, 2021 by Marcono1234 • Draft

Previous 1 2 3 4 5 6 7 Next

Previous Next

ProTip! Find all pull requests that aren't related to any open issues with -linked:issue.