Popular repositories
-
vscode-codeql-starter Public
Forked from github/vscode-codeql-starter
Starter workspace to use with the CodeQL extension for Visual Studio Code.
-
-
3,105 contributions in the last year
Contribution activity
April 2023
Created 26 commits in 1 repository
Created a pull request in github/codeql that received 6 comments
Swift: Add CryptoSwift sinks in swift/weak-sensitive-data-hashing
This was fairly straightforward now that we have CSV sinks in the query. I think it's quite a big win for the coverage of this query.
+221
−38
•
6
comments
Opened 7 other pull requests in 1 repository
github/codeql
3
open
3
merged
1
closed
- Swift: widen swift/predicate-injection sources
- Swift: Downgrade swift/unsafe-js-eval to precision medium.
- Swift: Add some sink models
- Swift: Add CSV extension points to the encryption queries.
- Swift: Convert dataflow / taint tests to DataFlow::ConfigSig.
- Swift: Add missing import to ExternalFlow.qll.
- Swift: Modernize the encryption queries
Reviewed 5 pull requests in 1 repository
github/codeql
5 pull requests
- C++: Consider ArrayExpr with non-constant size expressions as a BufferAccess
-
C++: Promote
cpp/redundant-null-check-simpleto Code Scanning - Swift: Add CSV extension points to the encryption queries.
- C++: Implement use-after-free and double-free queries using the new IR use-use dataflow
-
Swift: Update final two queries to use
DataFlow::ConfigSig
37
contributions
in private repositories
Apr 3 – Apr 14