github / codeql

Watch 80
Star 2k
Fork 451

Code
Issues 210
Pull requests 133
Discussions
Actions
Projects
Security
Insights

Code
Issues
Pull requests
Discussions
Actions
Projects
Security
Insights

Labels 27 Milestones 6

New pull request New

133 Open 4,242 Closed

Author

Filter by author

Label

Filter by label

Use alt + click/return to exclude labels.

Projects

Filter by project

Milestones

Filter by milestone

Reviews

Filter by reviews

No reviews Review required Approved review Changes requested

Assignee

Filter by who’s assigned

Sort

Sort by

Newest Oldest Most commented Least commented Recently updated Least recently updated

Most reactions

Python: dataflow, unify iterated unpacking

Python

#5047 opened Jan 28, 2021 by yoff • Draft

C++: Model more pure functions

C++

#5046 opened Jan 28, 2021 by MathiasVP • Review required

JS: Detect more route-handlers by adding more type-tracking steps

Awaiting evaluation JS WIP

#5045 opened Jan 28, 2021 by erik-krogh • Review required

C++: Uniform treatment of parameters and qualifiers in model dataflow

C++

#5043 opened Jan 28, 2021 by MathiasVP • Review required

Python: Add full-path modeling of Django more view classes

Python

#5042 opened Jan 28, 2021 by RasmusWL • Review required

JS: Add RemoteFlowSource.isFromClientSideUrl

#5033 opened Jan 27, 2021 by asgerf • Draft

Dataflow: Add subpaths query predicate.

Java

#5032 opened Jan 27, 2021 by aschackmull • Draft

JS: Ignore Angular templates in a few non-security queries

#5029 opened Jan 27, 2021 by asgerf • Approved

Python: Callable for lambdas

Python

#5022 opened Jan 26, 2021 by yoff • Changes requested

JS: Drive-by changes from Redux modelling

#5019 opened Jan 26, 2021 by asgerf • Draft

C#: Extract 'and' and 'or' patterns

C# documentation

#5018 opened Jan 26, 2021 by tamasvajk • Approved 3 of 4

CPP: add query for CWE-788 Access of memory location after the end of a buffer using strlen.

C++ documentation

#5011 opened Jan 24, 2021 by ihsinme • Review required

CPP: Add query for CWE-570 detect and handle memory allocation errors.

C++ documentation

#5010 opened Jan 24, 2021 by ihsinme • Review required

Java: Queries to detect remote source flow origins to CORS header.

Java documentation

#5008 opened Jan 24, 2021 by torque59 • Review required

Java: Fix NashornScriptEngine detection in ScriptEngine query

Java documentation

#5006 opened Jan 23, 2021 by p0wn4j • Review required

C#: Follow line directives when getting element location

#5005 opened Jan 22, 2021 by tamasvajk • Review required 0 of 4

C#: Use shared SSA implementation for `{Pre,Base}Ssa`

#4998 opened Jan 21, 2021 by hvitved • Draft

Docs: Add outline for CWE coverage page

documentation

#4997 opened Jan 21, 2021 by shati-patel • Draft

Java: CWE-652: Improper Neutralization of Data within XQuery Expressions ('XQuery Injection')

Java documentation

#4994 opened Jan 21, 2021 by haby0 • Review required

Java: Simple support for Ratpack HTTP Framework

Java

#4991 opened Jan 20, 2021 by JLLeitschuh • Review required

Java: Track taint through Spring Java bean getters on super types

Java

#4989 opened Jan 20, 2021 by lcartey • Review required

JS: flag less overly general functions with js/unneeded-defensive-code

JS documentation

#4987 opened Jan 20, 2021 by erik-krogh • Review required

Python: Port url redirect query

Python documentation

#4981 opened Jan 19, 2021 by RasmusWL • Draft

C#: Extract different trivia types

#4976 opened Jan 19, 2021 by tamasvajk • Approved 0 of 4

Java: Query for detecting JEXL injections

Java documentation

#4965 opened Jan 17, 2021 by artem-smotrakov • Review required

Previous 1 2 3 4 5 6 Next

Previous Next

ProTip! Filter pull requests by the default branch with base:main.