Skip to content

Pull requests: github/codeql

New pull request New
404 Open 16,531 Closed
404 Open 16,531 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Rust: Fix performance issue with additionalExternalFile no-change-note-required This PR does not need a change note Rust Pull requests that update Rust code
#21671 opened Apr 8, 2026 by geoffw0 Loading…
1
Python: Add exception, reachability, and other kinds of modelling no-change-note-required This PR does not need a change note Python
#21668 opened Apr 8, 2026 by tausbn • Draft
Swift: Update to Swift 6.3 Swift
#21667 opened Apr 8, 2026 by jketema • Draft
1
Rename CONTRIBUTING.md to 1CONTRIBUTING.md documentation
#21664 opened Apr 7, 2026 by g66b166-hub Loading…
Actions: Add workflow_dispatch and workflow_call input sources for code injection Actions Analysis of GitHub Actions documentation
#21660 opened Apr 6, 2026 by tspascoal Loading…
8
Post-release preparation for codeql-cli-2.25.2 Actions Analysis of GitHub Actions C# C++ DataFlow Library documentation Go Java JS Python Ruby Rust Pull requests that update Rust code Swift
#21658 opened Apr 6, 2026 by codeql-ci • Draft
@oscarsj
Java: add RegexpCheckBarrier to trust-boundary-violation sanitizers documentation Java
#21656 opened Apr 4, 2026 by MarkLee131 Loading…
4
Java: treat hash/encrypt/digest methods as sensitive-log sanitizers documentation Java
#21654 opened Apr 4, 2026 by MarkLee131 Loading…
1
1
Java: recognize Path.toRealPath() as path normalization sanitizer documentation Java
#21652 opened Apr 4, 2026 by MarkLee131 Loading…
1
1
Java: reduce false positives in sensitive-log documentation Java
#21650 opened Apr 4, 2026 by MarkLee131 Loading…
1
3
JavaScript: Add setHTMLUnsafe and parseHTMLUnsafe as XSS sinks JS
#21648 opened Apr 3, 2026 by sunnyeo Loading…
1
Bump google.golang.org/protobuf from 1.30.0 to 1.33.0 in /go/ql/test/query-tests/Security/CWE-347 dependencies Pull requests that update a dependency file documentation Go
#21644 opened Apr 3, 2026 by dependabot bot Loading…
Bump golang.org/x/crypto from 0.7.0 to 0.45.0 in /go/ql/test/library-tests/semmle/go/frameworks/Fasthttp dependencies Pull requests that update a dependency file documentation Go
#21643 opened Apr 3, 2026 by dependabot bot Loading…
Improve prompt inject for Python no-change-note-required This PR does not need a change note Python
#21641 opened Apr 2, 2026 by josefs • Draft
4
Rust: Add AlertSuppression.ql for inline suppression comments documentation Rust Pull requests that update Rust code
#21638 opened Apr 2, 2026 by cnuss Loading…
5 tasks done
1
3
Actions: Correctly check reusable workflow permissions in actions/missing-workflow-permissions Actions Analysis of GitHub Actions documentation
#21636 opened Apr 2, 2026 by jketema Loading…
1
C++: Upgrade cpp/suspicious-add-sizeof to high precision C++ documentation
#21635 opened Apr 2, 2026 by geoffw0 • Draft
C++: Upgrade cpp/comparison-with-wider-type to high precision C++ documentation
#21634 opened Apr 2, 2026 by geoffw0 • Draft
C++: Upgrade cpp/integer-multiplication-cast-to-long to high precision C++ documentation
#21633 opened Apr 2, 2026 by geoffw0 • Draft
C++: Upgrade cpp/wrong-type-format-argument to high precision C++ documentation
#21632 opened Apr 2, 2026 by geoffw0 • Draft
Bump gazelle from 0.47.0 to 0.48.0 bazel Pull requests that update bazel code dependencies Pull requests that update a dependency file
#21630 opened Apr 2, 2026 by dependabot bot Loading…
1
Actions: Add four experimental queries Actions Analysis of GitHub Actions documentation
#21624 opened Mar 31, 2026 by JamieMagee Loading…
18
C++: Fix unintended conflation in a taint step C++
#21622 opened Mar 31, 2026 by MathiasVP • Draft
Add supply chain queries for npm publish token usage and missing provenance Actions Analysis of GitHub Actions documentation
#21621 opened Mar 31, 2026 by david-wiggs Loading…
9
Go: migrate control flow graph to shared CFG library documentation Go
#21614 opened Mar 30, 2026 by Copilot AI • Draft
@owen-mc
7
ProTip! no:milestone will show everything without a milestone.