GitHub · Where software is built

Labels Milestones New issue

CodeQL analysis does not detect expected command injection vulnerability

#19811

· AntonBrazovski opened

on Jun 18, 2025

General issue Go. Why isn't the following code recognized as a source in a global data stream?

#19807

· Weirdokky opened

on Jun 18, 2025

Add support for Oracle Call Interface (OCI) to C/C++ coverage

#19764

· ebickle opened

on Jun 13, 2025

Taint step for the Gradio framework

#19752

· sylwia-budzynska opened

on Jun 13, 2025

CodeQL unable to find out sources of a chosen dataflow node in Javascript

#19720

· lllssskkk opened

on Jun 10, 2025

Code scanning doesn't run on pull request in organization repo

#19698

· Marukome0743 opened

on Jun 8, 2025

Code scanning is waiting for results from CodeQL; CodeQL is stuck

#19671

· jyio-va opened

on Jun 4, 2025

Kotlin language database create bug?

#19670

· Firebasky opened

on Jun 4, 2025

CodeQL Docs: SnakeYaml is now secure by default

#19664

· JLLeitschuh opened

on Jun 3, 2025

Call chain analysis exception

#19637

· fraudV opened

on Jun 1, 2025

Actions: imprecise action references in model data

#19635

· woodruffw opened

on May 30, 2025

Java: static field access of unknown class breaks dataflow (build-mode=none)

#19597

· odipar opened

on May 27, 2025