Skip to content

Pull requests: github/codeql

New pull request New
262 Open 8,812 Closed
262 Open 8,812 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

C#/Java: Re-factor provenance related predicates.
C#
#11721 opened Dec 16, 2022 by michaelnebel • Draft
Ruby: Fix bug in call-sensitivity logic for initialize calls
no-change-note-required This PR does not need a change note Ruby
#11720 opened Dec 16, 2022 by hvitved Loading…
Shared AlertSuppression library
C# C++ Go Java JS no-change-note-required This PR does not need a change note Python Ruby
#11719 opened Dec 16, 2022 by aibaars Loading…
1
Ruby: Recognize custom self.new methods that return self.allocate
no-change-note-required This PR does not need a change note Ruby
#11718 opened Dec 16, 2022 by hvitved Loading…
Java: exclude parameterless static methods from DataFlowTargetApi and from ExternalApi
Java no-change-note-required This PR does not need a change note
#11717 opened Dec 15, 2022 by jcogs33 Loading…
1
C++: Rewrite cpp/cgi-xss to not use default taint tracking
C++
#11716 opened Dec 15, 2022 by jketema • Draft
C++: Use FlowSource in DefaultTaintTracking instead of isUserInput
C++
#11714 opened Dec 15, 2022 by jketema • Draft
6
[Draft] Java: Add query for leaking sensitive data through a ResultReceiver
Java
#11713 opened Dec 15, 2022 by joefarebrother • Draft
2
Java: Apply deadcode guard to data flow nodes.
Java
#11712 opened Dec 15, 2022 by aschackmull Loading…
9
C#/Java: Delete deprecated ModelCsv classes and related predicates.
C# Java
#11711 opened Dec 15, 2022 by michaelnebel • Draft
ATM: add boosted version for ShellCommandInjectionFromEnvironment query
ATM
#11709 opened Dec 15, 2022 by jhelie • Draft
Java: handle printing an empty comment (/**/); add relevant tests
documentation Java
#11707 opened Dec 15, 2022 by smowton Loading…
1
Go: Use any() to stub getCallbackParameter/ReturnType and getSyntheticGlobalType
Go
#11706 opened Dec 15, 2022 by owen-mc Loading…
1
Go: Add and Modify Sanitizers For TaintedPath
Go
#11703 opened Dec 15, 2022 by Kwstubbs Loading…
Introduce the security-experimental CodeQL suite and experimental tag
C# C++ documentation enhancement New feature or request Go Java JS Python Ruby Swift
#11702 opened Dec 14, 2022 by turbo Loading…
@turbo
2
Go: Count fields correctly
documentation Go
#11701 opened Dec 14, 2022 by owen-mc Loading…
6
[Java] Document fixes for deserialization vulnerabilities by framework
documentation Java
#11700 opened Dec 14, 2022 by JLLeitschuh Loading…
5
Dynamic: Share more regexp code
Java JS Python Ruby
#11699 opened Dec 14, 2022 by erik-krogh • Draft
2
Added clarifying example for concat in docs
documentation
#11695 opened Dec 14, 2022 by AryazE Loading…
C++: Iterator flow for IR-based use-use flow (second attempt)
C++ no-change-note-required This PR does not need a change note
#11694 opened Dec 14, 2022 by MathiasVP Loading…
C++: Define the argv flow source in terms the input parameter
C++
#11693 opened Dec 14, 2022 by jketema Loading…
3
C#: Re-factor and use ForEach.
C#
#11686 opened Dec 14, 2022 by michaelnebel Loading…
5
Merge rc/3.8 back to main
C# C++ documentation Go Java JS Python Ruby
#11681 opened Dec 13, 2022 by henrymercer Loading…
1
C++: Update tests after frontend changes
C++ depends on internal PR This PR should only be merged in sync with an internal Semmle PR
#11680 opened Dec 13, 2022 by jketema Loading…
Python: cryptography module upgrades
Python
#11678 opened Dec 13, 2022 by bdrodes Loading…
@RasmusWL
5
ProTip! Type g p on any issue or pull request to go back to the pull request listing page.