Search results

Improve actions/ql/src/Security/CWE-829/UntrustedCheckoutX queries

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

documentation

Status: Open (in progress).

github/codeqlnumber 21715

#21715 In github/codeql;

· knewbury01 opened on Apr 15, 2026

Fix/path injection read subkind

documentation

Java

Status: Open (in progress).

github/codeqlnumber 21741

#21741 In github/codeql;

· MarkLee131 opened on Apr 21, 2026

docs: Add 'Customizing library models for Rust' documentation

documentation

ready-for-doc-reviewThis PR requires and is ready for review from the GitHub docs team.This PR requires and is ready for review from the GitHub docs team.

Status: Open (in progress).

github/codeqlnumber 21727

#21727 In github/codeql;

· coadaflorin opened on Apr 17, 2026

Go: migrate control flow graph to shared CFG library

documentation

Go

Status: Draft (not ready).

github/codeqlnumber 21614

#21614 In github/codeql;

· Copilot opened on Mar 30, 2026

Actions: Add experimental prompt injection queries for CWE 1427

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

documentation

Status: Draft (not ready).

github/codeqlnumber 21675

#21675 In github/codeql;

· data-douser opened on Apr 9, 2026

Actions: Add experimental queries for AI output validation CWE 1426

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

documentation

Status: Draft (not ready).

github/codeqlnumber 21678

#21678 In github/codeql;

· data-douser opened on Apr 9, 2026

Extend actions/unpinned-tag to analyze composite action metadata (action.yml / action.yaml)

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

documentation

Status: Open (in progress).

github/codeqlnumber 21692

#21692 In github/codeql;

· Copilot opened on Apr 10, 2026

Just: introduce common "verbs"

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

C#

C++

documentation

Go

Java

JS

Kotlin

Python

Ruby

RustPull requests that update Rust codePull requests that update Rust code

Swift

Status: Open (in progress).

github/codeqlnumber 19978

#19978 In github/codeql;

· redsun82 opened on Jul 4, 2025

Add docs comment about deduplicating query rows

documentation

Status: Open (in progress).

github/codeqlnumber 21693

#21693 In github/codeql;

· k4lizen opened on Apr 10, 2026

Add extra source to actions CWE-094/CodeInjectionMedium

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

documentation

Status: Open (in progress).

github/codeqlnumber 21672

#21672 In github/codeql;

· knewbury01 opened on Apr 8, 2026

Actions: Add workflow_dispatch and workflow_call input sources for code injection

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

documentation

Status: Open (in progress).

github/codeqlnumber 21660

#21660 In github/codeql;

· tspascoal opened on Apr 6, 2026

Rust: Add AlertSuppression.ql for inline suppression comments

documentation

RustPull requests that update Rust codePull requests that update Rust code

Status: Open (in progress).

github/codeqlnumber 21638

#21638 In github/codeql;

· cnuss opened on Apr 2, 2026