Search results

Actions: Add four experimental queries

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

documentation

Status: Open (in progress).

github/codeqlnumber 21624

#21624 In github/codeql;

· JamieMagee opened on Mar 31, 2026

Actions: Add workflow_dispatch and workflow_call input sources for code injection

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

documentation

Status: Open (in progress).

github/codeqlnumber 21660

#21660 In github/codeql;

· tspascoal opened on Apr 6, 2026

Actions: improve improper access control query

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

documentation

Status: Open (in progress).

github/codeqlnumber 20904

#20904 In github/codeql;

· redsun82 opened on Nov 25, 2025

Just: introduce common "verbs"

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

C#

C++

documentation

Go

Java

JS

Kotlin

Python

Ruby

RustPull requests that update Rust codePull requests that update Rust code

Swift

Status: Open (in progress).

github/codeqlnumber 19978

#19978 In github/codeql;

· redsun82 opened on Jul 4, 2025

Add Minimum Permissions Map

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

Status: Draft (not ready).

github/codeqlnumber 18517

#18517 In github/codeql;

· KyFaSt opened on Jan 16, 2025

actions: Add some missing permissions

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

documentation

Status: Open (in progress).

github/codeqlnumber 19357

#19357 In github/codeql;

· yoff opened on Apr 23, 2025

Actions: Removed a false positive injection sink model for theveracode/veracode-sca action.

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

documentation

Status: Open (in progress).

github/codeqlnumber 21604

#21604 In github/codeql;

· XinyuZhangXvX opened on Mar 27, 2026

Add Microsoft to trusted actions owner

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

documentation

Status: Open (in progress).

github/codeqlnumber 19450

#19450 In github/codeql;

· felickz opened on May 1, 2025

Actions: Add new query actions/code-injection/low for code injection with step outputs

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

documentation

Status: Open (in progress).

github/codeqlnumber 20974

#20974 In github/codeql;

· owen-mc opened on Dec 5, 2025

Actions: Add experimental prompt injection queries for CWE 1427

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

documentation

Status: Draft (not ready).

github/codeqlnumber 21675

#21675 In github/codeql;

· data-douser opened on Apr 9, 2026

Actions: Add taint summary for suisei-cn/actions-download-file url input

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

documentation

Status: Open (in progress).

github/codeqlnumber 21600

#21600 In github/codeql;

· XinyuZhangXvX opened on Mar 27, 2026

Actions: Add experimental queries for AI output validation CWE 1426

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

documentation

Status: Draft (not ready).

github/codeqlnumber 21678

#21678 In github/codeql;

· data-douser opened on Apr 9, 2026