Skip to content

Pull requests: github/codeql

New pull request New
Clear current search query, filters, and sorts
31 Open 471 Closed
31 Open 471 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

JS: Add class harness to recover localFieldStep edges JS
#19287 opened Apr 11, 2025 by asgerf • Draft
JS: QL-side type/name resolution for TypeScript and JSDoc JS
#19078 opened Mar 20, 2025 by asgerf • Draft
7
JS: Restrict AP limit for regexp injection JS
#18711 opened Feb 7, 2025 by asgerf • Draft
JS: Make the function decl ID belong to the outer container JS
#18669 opened Feb 4, 2025 by asgerf • Draft
Use inline test expectations for query predicates JS
#18620 opened Jan 29, 2025 by asgerf • Draft
Ruby: remove some unneeded code from ConditionalBypass no-change-note-required This PR does not need a change note Ruby
#18569 opened Jan 23, 2025 by asgerf • Draft
Actions: mass enable diff-informed data flow Actions Analysis of GitHub Actions
#18346 opened Dec 20, 2024 by asgerf • Draft
Go: mass enable diff-informed data flow Go
#18345 opened Dec 20, 2024 by asgerf • Draft
C#: mass enable diff-informed data flow C#
#18344 opened Dec 20, 2024 by asgerf • Draft
Swift: mass enable diff-informed data flow Swift
#18343 opened Dec 20, 2024 by asgerf • Draft
C++: mass enable diff-informed data flow C++
#18342 opened Dec 20, 2024 by asgerf • Draft
4
Ruby: Query for N+1 queries problem documentation Ruby
#18317 opened Dec 18, 2024 by asgerf • Draft
4
Experiment with merging PathGraph and GlobalFlowSig DataFlow Library Ruby
#18296 opened Dec 16, 2024 by asgerf • Draft
JS: Handle sequence expressions in module detection JS
#17958 opened Nov 11, 2024 by asgerf • Draft
1
Data flow: add AP-length tracking before stage 4 DataFlow Library
#17409 opened Sep 9, 2024 by asgerf • Draft
Data flow: fix bad join in localFlowExit DataFlow Library
#17339 opened Aug 30, 2024 by asgerf • Draft
Data flow: track AP length in stage 2 DataFlow Library no-change-note-required This PR does not need a change note
#17337 opened Aug 29, 2024 by asgerf • Draft
JS: Account for ExtendCalls in localFieldStep JS no-change-note-required This PR does not need a change note
#16057 opened Mar 26, 2024 by asgerf • Draft
JS: Support value access paths in MaD type columns JS no-change-note-required This PR does not need a change note
#16037 opened Mar 25, 2024 by asgerf • Draft
2
JS: Expose whether an endpoint name is synthetic JS no-change-note-required This PR does not need a change note
#15975 opened Mar 19, 2024 by asgerf • Review required
2
C++: use in/out barriers with flow state C++ no-change-note-required This PR does not need a change note
#14331 opened Sep 28, 2023 by asgerf • Review required
JS: Fix a bug caused by capture nodes not being SourceNodes JS
#13904 opened Aug 7, 2023 by asgerf • Draft
JS: Add 'vulnerableCallModel' extension point JS Python Ruby
#13727 opened Jul 12, 2023 by asgerf • Draft
3
Ruby: remember data flow direction on module nodes no-change-note-required This PR does not need a change note Ruby
#13626 opened Jun 29, 2023 by asgerf • Draft
Ruby: align type-tracking visibility with JS/Python documentation Python Ruby
#13615 opened Jun 29, 2023 by asgerf • Draft
ProTip! Add no:assignee to see everything that’s not assigned.