Skip to content

Pull requests: github/codeql

New pull request New
416 Open 16,805 Closed
416 Open 16,805 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Add CWE-295 query for C# (accepting any TLS certificate) C# documentation
#22019 opened Jun 19, 2026 by Copilot AI • Draft
@owen-mc
Cfg: Change AST/CFG for CatchClauses to use a pattern. C# Java no-change-note-required This PR does not need a change note
#22017 opened Jun 19, 2026 by aschackmull Contributor • Draft
2
Unified/swift: new AST spec and Swift mappings documentation no-change-note-required This PR does not need a change note
#22016 opened Jun 19, 2026 by asgerf Contributor • Draft
2
Update Apache Avro MaDs - Now including summaries Java
#22015 opened Jun 19, 2026 by BazookaMusic Contributor • Draft
1
Ruby AST: preserve ExceptionList node in RescueClause for 2+ exceptions no-change-note-required This PR does not need a change note Ruby
#22014 opened Jun 19, 2026 by Copilot AI Loading…
@aschackmull
3
Swift: Strip out more unknown clang arguments Swift
#22013 opened Jun 19, 2026 by jketema Contributor Loading…
2
C#: NoOpPackageRestore only needs the PackageConfigs collection and n… C#
#22011 opened Jun 19, 2026 by michaelnebel Contributor • Draft
2
Rust: Additional test cases for rust/weak-sensitive-data-hashing no-change-note-required This PR does not need a change note Rust Pull requests that update Rust code
#22009 opened Jun 18, 2026 by geoffw0 Contributor Loading…
4
[WIP] Prompt injection detection for python documentation Python
#22008 opened Jun 18, 2026 by BazookaMusic Contributor • Draft
2
Java: update ferstl depgraph cves Java no-change-note-required This PR does not need a change note
#22007 opened Jun 18, 2026 by IdrissRio Contributor • Draft
Go: more models for log.slog documentation Go
#22006 opened Jun 18, 2026 by owen-mc Contributor Loading…
3
Bump the pip group across 2 directories with 2 updates dependencies Pull requests that update a dependency file Python
#22005 opened Jun 18, 2026 by dependabot Bot Loading…
Java: model LDAP bind-DN sinks for java/ldap-injection documentation Java
#22002 opened Jun 18, 2026 by tonghuaroot Contributor Loading…
Actions: Fix dominates() false positive in reusable workflows Actions Analysis of GitHub Actions documentation
#21986 opened Jun 15, 2026 by JarLob Contributor Loading…
9
Kotlin: add Kotlin 2.4.0 support documentation Java Kotlin
#21970 opened Jun 11, 2026 by andersfugmann Contributor Loading…
51
Add experimental C# query: SSRF host guard missing IPv6-transition unwrap (CWE-918/CWE-1389) C# documentation
#21964 opened Jun 10, 2026 by tonghuaroot Contributor Loading…
3
Python: visit function parameter and return annotations in new CFG documentation Python
#21943 opened Jun 4, 2026 by yoff Contributor • Draft
Python: model exception edges for raise-prone expressions inside try/with Python
#21937 opened Jun 4, 2026 by yoff Contributor • Draft
Shared CFG: add defaulted getWhileElse/getForeachElse to AstSig
#21931 opened Jun 2, 2026 by yoff Contributor Loading…
10
Python: inline init_module_submodule_defn into ImportResolution documentation Python
#21930 opened Jun 2, 2026 by yoff Contributor Loading…
5
Python: switch dataflow library to new (shared) CFG + SSA documentation Python
#21925 opened Jun 1, 2026 by yoff Contributor • Draft
11
Python: add new shared-SSA-backed SSA adapter (additive) documentation Python
#21923 opened Jun 1, 2026 by yoff Contributor • Draft
4
Python: add new shared-CFG-backed control flow graph (additive) documentation Go Python Ruby Rust Pull requests that update Rust code
#21921 opened Jun 1, 2026 by yoff Contributor • Draft
3
Python: qualify Flow.qll's AST references with Py:: prefix no-change-note-required This PR does not need a change note Python
#21920 opened Jun 1, 2026 by yoff Contributor Loading…
4
Python: deprecate AstNode.getAFlowNode() and rewrite callers documentation Python
#21919 opened Jun 1, 2026 by yoff Contributor Loading…
7
ProTip! Exclude everything labeled bug with -label:bug.