Skip to content

Pull requests: github/codeql

New pull request New
332 Open 12,541 Closed
332 Open 12,541 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

C++: Fix comment in IR test
C++
#16319 opened Apr 24, 2024 by jketema Loading…
Dataflow: Use doublyBoundedFastTC.
DataFlow Library no-change-note-required This PR does not need a change note
#16318 opened Apr 24, 2024 by aschackmull Loading…
WIP: build the go extractor with bazel
Go JS Python Swift
#16317 opened Apr 24, 2024 by redsun82 • Draft
Bazel: introduce buildifier formatting
JS Python Swift
#16315 opened Apr 24, 2024 by redsun82 Loading…
1
Ruby: do fewer regexp matches in SensitiveActions
no-change-note-required This PR does not need a change note Ruby
#16314 opened Apr 24, 2024 by nickrolfe Loading…
1
JS: Fix naming issue in generated models
JS no-change-note-required This PR does not need a change note
#16308 opened Apr 23, 2024 by asgerf Loading…
Go: fix flow through string concatenation in go/incomplete-hostname-regex
documentation Go
#16307 opened Apr 23, 2024 by owen-mc Loading…
2
Go: Use value flow instead of taint flow for go/incorrect-integer-conversion
Go
#16305 opened Apr 23, 2024 by owen-mc • Draft
1
DataFlow/C++: fieldFlowBranchLimit follow-up (2)
C++ DataFlow Library
#16303 opened Apr 23, 2024 by MathiasVP • Draft
[Draft] Python: Model the Pyramid framework
Python
#16300 opened Apr 22, 2024 by joefarebrother • Draft
1
C++: Remove an unnecessary column
C++
#16299 opened Apr 22, 2024 by MathiasVP • Draft
Java: Identify more APIs as supported in the telemetry queries.
Java no-change-note-required This PR does not need a change note
#16297 opened Apr 22, 2024 by michaelnebel Loading…
9
Bump golang.org/x/net from 0.0.0-20200505041828-1ed23360d12c to 0.23.0 in /go/ql/integration-tests/all-platforms/go/two-go-mods-not-nested/src/subdir2
dependencies Pull requests that update a dependency file Go
#16277 opened Apr 19, 2024 by dependabot bot Loading…
2
Python: Move dataflow tests out of experimental
documentation no-change-note-required This PR does not need a change note Python
#16252 opened Apr 18, 2024 by RasmusWL Loading…
2
C#: Do not run dotnet restore in parallel for projects in the same fo…
C#
#16248 opened Apr 18, 2024 by michaelnebel • Draft
JavaScript: ignore deliberate dummy keys
external-contribution JS
#16244 opened Apr 17, 2024 by Aeolun Loading…
C#: Do not run multiple dotnet/nuget restore in parallel
C#
#16243 opened Apr 17, 2024 by hvitved • Draft
1
Bump chrono from 0.4.37 to 0.4.38 in /ql
dependencies Pull requests that update a dependency file QL-for-QL rust Pull requests that update Rust code
#16223 opened Apr 16, 2024 by dependabot bot Loading…
1
Go: Add an example specific to domain names in missing-regexp-anchor
documentation Go
#16220 opened Apr 15, 2024 by erik-krogh • Draft
1
Dataflow: Add support for pretty-printed alert provenance in tests
C# DataFlow Library Go Java JS no-change-note-required This PR does not need a change note Python Ruby
#16210 opened Apr 15, 2024 by aschackmull Loading…
11
Bump tree-sitter from 0.20.10 to 0.22.5 in /ql
dependencies Pull requests that update a dependency file QL-for-QL rust Pull requests that update Rust code
#16207 opened Apr 15, 2024 by dependabot bot Loading…
[Ruby] Denial of Service query
documentation external-contribution Ruby
#16206 opened Apr 14, 2024 by Sim4n6 • Draft
1
Python: test the MaD path for constructor calls
Python
#16194 opened Apr 12, 2024 by yoff Loading…
4
Ruby: ActiveRecord - refine conditions argument as an SQLi sink
no-change-note-required This PR does not need a change note Ruby
#16185 opened Apr 11, 2024 by alexrford Loading…
2
Promote sources in mime/multipart package
Go
#16183 opened Apr 11, 2024 by owen-mc • Draft
2
ProTip! no:milestone will show everything without a milestone.