Skip to content

Pull requests: github/codeql

New pull request New
392 Open 16,517 Closed
392 Open 16,517 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Bump gazelle from 0.47.0 to 0.48.0 bazel Pull requests that update bazel code dependencies Pull requests that update a dependency file
#21630 opened Apr 2, 2026 by dependabot bot Loading…
1
C#: Deprecate get[L|R]Value predicates. C# documentation
#21627 opened Apr 1, 2026 by michaelnebel Loading…
2
Actions: Add four experimental queries Actions Analysis of GitHub Actions documentation
#21624 opened Mar 31, 2026 by JamieMagee Loading…
17
C++: Fix unintended conflation in a taint step C++
#21622 opened Mar 31, 2026 by MathiasVP • Draft
Add supply chain queries for npm publish token usage and missing provenance Actions Analysis of GitHub Actions documentation
#21621 opened Mar 31, 2026 by david-wiggs Loading…
9
Go: migrate control flow graph to shared CFG library documentation Go
#21614 opened Mar 30, 2026 by Copilot AI • Draft
@owen-mc
7
C#: Taint members of types in ASP.NET user context. C# documentation
#21612 opened Mar 30, 2026 by michaelnebel Loading…
2
Narrow ZipSlip sinks to file write operations, excluding read-only paths documentation Java
#21609 opened Mar 28, 2026 by MarkLee131 Loading…
1
2
Actions: Removed a false positive injection sink model for theveracode/veracode-sca action. Actions Analysis of GitHub Actions documentation
#21604 opened Mar 27, 2026 by XinyuZhangXvX Loading…
3
Python: Port UseOfExit.ql Python
#21603 opened Mar 27, 2026 by tausbn • Draft
Python: Port ModificationOfLocals.ql Python
#21602 opened Mar 27, 2026 by tausbn • Draft
Python: Port UnusedExceptionObject.ql Python
#21601 opened Mar 27, 2026 by tausbn • Draft
Actions: Add taint summary for suisei-cn/actions-download-file url input Actions Analysis of GitHub Actions documentation
#21600 opened Mar 27, 2026 by XinyuZhangXvX Loading…
1
Python: Port ShouldUseWithStatement.ql no-change-note-required This PR does not need a change note Python
#21598 opened Mar 27, 2026 by tausbn Loading…
2
Python: Port UnreachableCode.ql Python
#21597 opened Mar 27, 2026 by tausbn • Draft
Rust: Track closure types in data flow C# DataFlow Library Rust Pull requests that update Rust code
#21596 opened Mar 27, 2026 by hvitved • Draft
1
Data flow: Add hook for preventing lambda dispatch in source call contexts C# DataFlow Library no-change-note-required This PR does not need a change note
#21592 opened Mar 26, 2026 by hvitved Loading…
5
Python: Improve "bind all interfaces" query documentation Python
#21590 opened Mar 26, 2026 by tausbn Loading…
5
Rust: Fix performance issue associated with neutral models no-change-note-required This PR does not need a change note Rust Pull requests that update Rust code
#21587 opened Mar 26, 2026 by geoffw0 • Draft
Shared: update code comments explaining models-as-data format to include barriers and barrier guards C# C++ DataFlow Library Go Java JS no-change-note-required This PR does not need a change note Python Ruby Rust Pull requests that update Rust code Swift
#21584 opened Mar 26, 2026 by owen-mc Loading…
15
Kotlin: update to 2.3.20 depends on internal PR This PR should only be merged in sync with an internal Semmle PR documentation Java Kotlin
#21583 opened Mar 26, 2026 by redsun82 Loading…
2
Go: fix bad join order Go no-change-note-required This PR does not need a change note
#21576 opened Mar 25, 2026 by owen-mc Loading…
11
Remove false positive injection sink models for docker/build-push-action and step-security/harden-runner Actions Analysis of GitHub Actions documentation
#21574 opened Mar 25, 2026 by redsun82 Loading…
2
2
JS: Add regression test for YAML extraction JS
#21571 opened Mar 24, 2026 by henrymercer Loading…
6
C#: Replace CFG with the shared implementation C# Java
#21565 opened Mar 24, 2026 by aschackmull • Draft
4
ProTip! Add no:assignee to see everything that’s not assigned.