Skip to content

Pull requests: github/codeql

New pull request New
336 Open 11,892 Closed
336 Open 11,892 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Kotlin 2: Some test fixes
Java
#15544 opened Feb 7, 2024 by igfoo • Draft
C#: Try resolve relative paths in #line directives
C#
#15542 opened Feb 7, 2024 by tamasvajk • Draft
3
Ruby: Remove ReturnValue as access path for constructors
no-change-note-required This PR does not need a change note Ruby
#15541 opened Feb 7, 2024 by koesie10 Loading…
1
Capture flow: Take overwrites in nested scopes into account
DataFlow Library Java Python Ruby
#15540 opened Feb 7, 2024 by hvitved • Draft
1
Bazel/CMake: auto detect all cc_binary/cc_test targets
Swift
#15536 opened Feb 7, 2024 by redsun82 Loading…
C# Add missing Windows Forms implicit usings
C#
#15535 opened Feb 7, 2024 by tamasvajk Loading…
3
Reduce severity of java/relative-path-command
Java
#15533 opened Feb 6, 2024 by JLLeitschuh Loading…
Post-release preparation for codeql-cli-2.16.2
C# C++ DataFlow Library documentation Go Java JS Python Ruby Swift
#15531 opened Feb 6, 2024 by codeql-ci Loading…
@dbartol
Go: Promote go/hardcoded-key from experimental
documentation Go
#15527 opened Feb 6, 2024 by atorralba Loading…
3
Ruby: Add some more command injection sinks
Ruby
#15524 opened Feb 6, 2024 by hmac • Draft
JS: exclude tagged template literals from js/superfluous-trailing-arguments
JS
#15523 opened Feb 6, 2024 by erik-krogh Loading…
1
Ruby: Recognise more ActiveRecord connections
no-change-note-required This PR does not need a change note Ruby
#15521 opened Feb 5, 2024 by hmac Loading…
1
Ruby: Recognise raw Erb output as XSS sink
Ruby
#15520 opened Feb 5, 2024 by hmac • Draft
C#: Improve the cs/path-injection QHelp
C# documentation
#15519 opened Feb 5, 2024 by erik-krogh Loading…
10
C++: Change sources in NonConstantFormat.ql
C++
#15516 opened Feb 2, 2024 by bdrodes Loading…
18
Bump org.springframework:spring-context from 5.3.18 to 5.3.19 in /java/ql/test/utils/flowtestcasegenerator
dependencies Pull requests that update a dependency file Java
#15515 opened Feb 2, 2024 by dependabot bot Loading…
JS: Add support for TS 5.4-beta
documentation JS
#15510 opened Feb 2, 2024 by yoff • Draft
Shared: fix a bug in stateful outbarriers
DataFlow Library Java
#15507 opened Feb 1, 2024 by asgerf • Draft
C++: Add implicit destructors for named variables to the IR
C++
#15506 opened Feb 1, 2024 by rdmarsh2 • Draft
34
Dataflow: Support alert provenance
C# C++ DataFlow Library Go Java JS Python Ruby Swift
#15501 opened Feb 1, 2024 by aschackmull • Draft
DO NOT MERGE. Bump automodel query pack version for release kaspersv/automodel-pack-publisher-7739955510-dryrun
Java
#15500 opened Feb 1, 2024 by codeql-ci • Draft
@kaspersv
Python: Support integer subscripts in the API graph
Awaiting evaluation Do not merge yet, this PR is waiting for an evaluation to finish Python
#15497 opened Jan 31, 2024 by yoff • Draft
2
Tree-sitter extractors: use fresh IDs for locations
#15496 opened Jan 31, 2024 by nickrolfe Loading…
8
Declare permissions
no-change-note-required This PR does not need a change note QL-for-QL
#15493 opened Jan 31, 2024 by jsoref Loading…
1
24
C#: Additional tracking of lambdas through fields and properties
C#
#15489 opened Jan 31, 2024 by hvitved • Draft
ProTip! Exclude everything labeled bug with -label:bug.