Skip to content

Pull requests: github/codeql

New pull request New
392 Open 16,622 Closed
392 Open 16,622 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

[Draft] Java: Add remote flow sources for jakarta.websocket Java
#21041 opened Dec 15, 2025 by joefarebrother Contributor • Draft
1
C#: Add osx-arm64 as a possible RID. C#
#20998 opened Dec 9, 2025 by michaelnebel Contributor • Draft
JS: Allow isTypeUsed overrides to be global JS Python Ruby
#20980 opened Dec 8, 2025 by asgerf Contributor • Draft
Actions: Add new query actions/code-injection/low for code injection with step outputs Actions Analysis of GitHub Actions documentation
#20974 opened Dec 5, 2025 by owen-mc Contributor Loading…
3
JS: remove unreachable overloads query JS
#20968 opened Dec 5, 2025 by asgerf Contributor • Draft
JS: Fix bad join in export logic JS
#20952 opened Dec 2, 2025 by asgerf Contributor • Draft
Actions: improve improper access control query Actions Analysis of GitHub Actions documentation
#20904 opened Nov 25, 2025 by redsun82 Contributor Loading…
1
5
Rust: Jump-to-def for operations and indexing no-change-note-required This PR does not need a change note Rust Pull requests that update Rust code
#20900 opened Nov 24, 2025 by hvitved Contributor Loading…
18
Shared: Make UniversalFlow overlay-aware. C++ Java
#20884 opened Nov 21, 2025 by aschackmull Contributor • Draft
Rust: Improve models for conversions documentation Rust Pull requests that update Rust code
#20875 opened Nov 19, 2025 by geoffw0 Contributor • Draft
1 of 4 tasks
Java: Add support for data flow through thrown exceptions. Java
#20867 opened Nov 19, 2025 by aschackmull Contributor • Draft
3
Java: Propagate taint through field reads Java
#20865 opened Nov 18, 2025 by owen-mc Contributor • Draft
1
C#: Make NuGet feed reachability more conservative, C#
#20836 opened Nov 14, 2025 by michaelnebel Contributor • Draft
C#: Narrow scaffolding to (transitive) dependencies. C#
#20763 opened Nov 5, 2025 by michaelnebel Contributor • Draft
C#: Overlay annotations. C# documentation
#20756 opened Nov 4, 2025 by michaelnebel Contributor • Draft
Rust [EXPERIMENT]: Reintroduce extractor resolution Rust Pull requests that update Rust code
#20753 opened Nov 4, 2025 by hvitved Contributor • Draft
15
Rust [EXPERIMENT]: Reduce all query suites to just type inference Rust Pull requests that update Rust code
#20721 opened Oct 30, 2025 by hvitved Contributor • Draft
1
Fix Go extractor silent failures and improve error recovery Go
#20676 opened Oct 22, 2025 by allsmog Loading…
5
JS: Improve performance of trackUseNode JS
#20662 opened Oct 21, 2025 by asgerf Contributor • Draft
WIP: Go/PamAuthBypass Go
#20642 opened Oct 14, 2025 by d10c Contributor • Draft
Bump the go_modules group across 2 directories with 3 updates dependencies Pull requests that update a dependency file documentation Go
#20608 opened Oct 9, 2025 by dependabot Bot Loading…
2
Crypto: Add BouncyCastle signatures and block cipher modes documentation Java
#20575 opened Oct 2, 2025 by nicolaswill Contributor Loading…
2
Crypto: Add some example Java cryptographic discovery queries Java
#20567 opened Oct 1, 2025 by unprovable Contributor Loading…
Crypto: Alert fatigue remediation (legacy queries) C++ Python
#20566 opened Oct 1, 2025 by unprovable Contributor Loading…
5
Java: Add existing models of file reads to local threat model sources Java
#20533 opened Sep 26, 2025 by owen-mc Contributor • Draft
ProTip! Updated in the last three days: updated:>2026-04-27.