Skip to content

Pull requests: github/codeql

New pull request New
Clear current search query, filters, and sorts
372 Open 15,489 Closed
372 Open 15,489 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Create SECURITY.dc
#3168 opened Mar 31, 2020 by wdcne Loading…
1
C++ Test PR: try replacing AST dataflow with IR dataflow in 1.24
#4526 opened Oct 20, 2020 by rdmarsh2 • Draft
Release preparation for version 2.17.4 C# C++ DataFlow Library documentation Go Java JS Python Ruby Swift
#16565 opened May 22, 2024 by codeql-ci • Draft
@dbartol
Release preparation for version 2.17.4 C# C++ DataFlow Library documentation Go Java JS Python Ruby Swift
#16583 opened May 23, 2024 by codeql-ci • Draft
@dbartol
Merge pull request #5747 from rdmarsh2/rdmarsh2/cpp/deprecate-return-stack-allocated-object
#5750 opened Apr 22, 2021 by huzaifanabeel Loading…
1
Java: Promote Insecure Spring Boot Actuator Configuration query from experimental documentation Java
#20006 opened Jul 9, 2025 by jcogs33 Loading…
13
java inline expectations proof-of-concept with tests Java WIP This is a work-in-progress, do not merge yet!
#16911 opened Jul 5, 2024 by ginsbach • Draft
16
Go: Do not panic when extracting an object without a parent scope Go
#16865 opened Jun 27, 2024 by owen-mc • Draft
1
C++: Use alias analysis in IR dataflow C++
#16463 opened May 9, 2024 by MathiasVP • Draft
6
Bump chrono from 0.4.37 to 0.4.38 in /ql dependencies Pull requests that update a dependency file QL-for-QL Rust Pull requests that update Rust code
#16223 opened Apr 16, 2024 by dependabot bot Loading…
1
Bump golang.org/x/net from 0.0.0-20200505041828-1ed23360d12c to 0.23.0 in /go/ql/integration-tests/all-platforms/go/two-go-mods-not-nested/src/subdir2 dependencies Pull requests that update a dependency file Go
#16277 opened Apr 19, 2024 by dependabot bot Loading…
2
Go: Use objectpath for object labels in extractor Go
#16742 opened Jun 12, 2024 by owen-mc • Draft
DataFlow/C++: fieldFlowBranchLimit follow-up (2) C++ DataFlow Library
#16303 opened Apr 23, 2024 by MathiasVP • Draft
Data flow: Improve pruning when calculating flow through DataFlow Library
#16182 opened Apr 11, 2024 by hvitved • Draft
BigInt: Range Analysis experiment C# C++ Java
#16743 opened Jun 12, 2024 by d10c • Draft
2
C++: Block flow to integral and float types in cpp/unbounded-write C++ documentation
#16144 opened Apr 8, 2024 by MathiasVP • Draft
1
Ruby: Support erb flow for ActionController Ruby
#15555 opened Feb 8, 2024 by hmac • Draft
2
Dataflow: Debug tools. DataFlow Library
#15825 opened Mar 6, 2024 by aschackmull • Draft
JS: Account for ExtendCalls in localFieldStep JS no-change-note-required This PR does not need a change note
#16057 opened Mar 26, 2024 by asgerf • Draft
C++: Use 'FeatureEqualSourceSinkCallContext' in cpp/use-after-free and cpp/double-free C++ no-change-note-required This PR does not need a change note
#16126 opened Apr 4, 2024 by MathiasVP • Draft
C++: IR translation for destruction of temporaries in dynamic initializers C++ documentation
#15981 opened Mar 19, 2024 by rdmarsh2 • Draft
4
Go: Convert models for variadic functions to use models-as-data documentation Go
#16592 opened May 25, 2024 by owen-mc • Draft
2
python: Add provenance column to MaD JS Python Ruby
#15730 opened Feb 26, 2024 by yoff • Draft
6
JS: Support value access paths in MaD type columns JS no-change-note-required This PR does not need a change note
#16037 opened Mar 25, 2024 by asgerf • Draft
2
Data flow: Store/load matching in pruning stage 3 DataFlow Library
#16741 opened Jun 12, 2024 by hvitved • Draft
18
ProTip! no:milestone will show everything without a milestone.