Skip to content

Pull requests: github/codeql

New pull request New
335 Open 12,282 Closed
335 Open 12,282 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Go: Update query help for go/path-injection to include example fixes.
documentation Go
#16020 opened Mar 22, 2024 by max-schaefer Loading…
1
C#: add hint regarding ECB to weak encryption QHelp
C# documentation
#16019 opened Mar 22, 2024 by p- • Draft
1
C++: Add precision to cpp/boost/tls-settings-misconfiguration and cpp/boost/use-of-deprecated-hardcoded-security-protocol
C++
#16018 opened Mar 22, 2024 by jketema • Draft
2
C#: Remove support for legacy LGTM options in autobuilder
C# C++
#16016 opened Mar 22, 2024 by hvitved • Draft
Java/Kotlin: Remove references to legacy ODASA_SNAPSHOT env var
documentation Java Kotlin
#16011 opened Mar 21, 2024 by igfoo Loading…
C#: Reduce chatty query output sizes
C#
#16005 opened Mar 21, 2024 by tamasvajk • Draft
1
JS: change the precision of the js/unsafe-external-link query to low
documentation JS
#16002 opened Mar 21, 2024 by erik-krogh Loading…
1
2
C#: Introduce AssemblyPath and re-factor AssemblyCache to use this in…
C#
#15993 opened Mar 20, 2024 by michaelnebel • Draft
Ruby: Recognise Grape params
Ruby
#15990 opened Mar 20, 2024 by hmac • Draft
[Draft] Ruby: Add query for insecure mass assignment
documentation Ruby
#15987 opened Mar 20, 2024 by joefarebrother • Draft
2
Ruby: Extend barrier guards to handle phi inputs
no-change-note-required This PR does not need a change note Ruby
#15985 opened Mar 20, 2024 by hvitved Loading…
Swift: upgrade to 5.10
Swift
#15984 opened Mar 20, 2024 by AlexDenisov • Draft
C++: IR translation for destruction of temporaries in dynamic initializers
C++ documentation
#15981 opened Mar 19, 2024 by rdmarsh2 • Draft
4
Go: Deal with incorrect toolchain versions
Go
#15979 opened Mar 19, 2024 by mbg Loading…
@mbg
5
Shared: Permit '*' in access path tokens.
DataFlow Library no-change-note-required This PR does not need a change note
#15977 opened Mar 19, 2024 by geoffw0 Loading…
13
JS: Expose whether an endpoint name is synthetic
JS no-change-note-required This PR does not need a change note
#15975 opened Mar 19, 2024 by asgerf Loading…
2
C++: IR translation for destruction of temporaries with extended lifetimes
C++ documentation
#15964 opened Mar 18, 2024 by rdmarsh2 Loading…
9
Java: Limit the amount of results that MissingEnumInSwitch produces per switch
Java
#15961 opened Mar 18, 2024 by igfoo Loading…
2
C#: Limit extracted compilation and extraction messages
C# no-change-note-required This PR does not need a change note
#15957 opened Mar 18, 2024 by tamasvajk Loading…
10
Java: Update tests for when we default integration tests to Java 21.
Java
#15956 opened Mar 18, 2024 by alexet Loading…
Bump tree-sitter from 0.20.10 to 0.22.2 in /ql
dependencies Pull requests that update a dependency file QL-for-QL rust Pull requests that update Rust code
#15948 opened Mar 18, 2024 by dependabot bot Loading…
C#: Sources for the Dapper database library
C# documentation
#15930 opened Mar 15, 2024 by egregius313 Loading…
19
[Test]: Threat models.
C#
#15926 opened Mar 14, 2024 by michaelnebel • Draft
Properly shared XML.qll implementation
C# C++ Java JS no-change-note-required This PR does not need a change note Python
#15923 opened Mar 14, 2024 by hvitved Loading…
11
Java: add models for some resource-related methods
Java
#15921 opened Mar 14, 2024 by jcogs33 • Draft
1
ProTip! Adding no:label will show everything without a label.