Search results

Improve actions/ql/src/Security/CWE-829/UntrustedCheckoutX queries

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

documentation

Status: Open (in progress).

github/codeqlnumber 21715

#21715 In github/codeql;

· knewbury01 opened on Apr 15, 2026

Extend actions/unpinned-tag to analyze composite action metadata (action.yml / action.yaml)

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

documentation

Status: Open (in progress).

github/codeqlnumber 21692

#21692 In github/codeql;

· Copilot opened on Apr 10, 2026

Actions: Add experimental queries for AI output validation CWE 1426

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

documentation

Status: Draft (not ready).

github/codeqlnumber 21678

#21678 In github/codeql;

· data-douser opened on Apr 9, 2026

Actions: Add experimental prompt injection queries for CWE 1427

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

documentation

Status: Draft (not ready).

github/codeqlnumber 21675

#21675 In github/codeql;

· data-douser opened on Apr 9, 2026

Add extra source to actions CWE-094/CodeInjectionMedium

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

documentation

Status: Open (in progress).

github/codeqlnumber 21672

#21672 In github/codeql;

· knewbury01 opened on Apr 8, 2026

Actions: Add workflow_dispatch and workflow_call input sources for code injection

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

documentation

Status: Open (in progress).

github/codeqlnumber 21660

#21660 In github/codeql;

· tspascoal opened on Apr 6, 2026

Actions: Add four experimental queries

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

documentation

Status: Open (in progress).

github/codeqlnumber 21624

#21624 In github/codeql;

· JamieMagee opened on Mar 31, 2026

Actions: Removed a false positive injection sink model for theveracode/veracode-sca action.

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

documentation

Status: Open (in progress).

github/codeqlnumber 21604

#21604 In github/codeql;

· XinyuZhangXvX opened on Mar 27, 2026

Actions: Add taint summary for suisei-cn/actions-download-file url input

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

documentation

Status: Open (in progress).

github/codeqlnumber 21600

#21600 In github/codeql;

· XinyuZhangXvX opened on Mar 27, 2026

Actions: Update reference link

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

documentation

Status: Open (in progress).

github/codeqlnumber 21295

#21295 In github/codeql;

· thatrobotdev opened on Feb 8, 2026

Actions: Add new query actions/code-injection/low for code injection with step outputs

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

documentation

Status: Open (in progress).

github/codeqlnumber 20974

#20974 In github/codeql;

· owen-mc opened on Dec 5, 2025

Actions: improve improper access control query

ActionsAnalysis of GitHub ActionsAnalysis of GitHub Actions

documentation

Status: Open (in progress).

github/codeqlnumber 20904

#20904 In github/codeql;

· redsun82 opened on Nov 25, 2025