Skip to content

Pull requests: github/codeql

New pull request New
Clear current search query, filters, and sorts
78 Open 492 Closed
78 Open 492 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Fix/path injection read subkind documentation Java
#21741 opened Apr 21, 2026 by MarkLee131 Contributor Loading…
5 tasks done
1
8
docs: Add 'Customizing library models for Rust' documentation documentation ready-for-doc-review This PR requires and is ready for review from the GitHub docs team.
#21727 opened Apr 17, 2026 by coadaflorin Contributor Loading…
52
Add docs comment about deduplicating query rows documentation
#21693 opened Apr 10, 2026 by k4lizen Loading…
Actions: Add experimental queries for AI output validation CWE 1426 Actions Analysis of GitHub Actions documentation
#21678 opened Apr 9, 2026 by data-douser Contributor • Draft
1
Actions: Add experimental prompt injection queries for CWE 1427 Actions Analysis of GitHub Actions documentation
#21675 opened Apr 9, 2026 by data-douser Contributor • Draft
2
Actions: Add workflow_dispatch and workflow_call input sources for code injection Actions Analysis of GitHub Actions documentation
#21660 opened Apr 6, 2026 by tspascoal Contributor Loading…
8
Rust: Add AlertSuppression.ql for inline suppression comments documentation Rust Pull requests that update Rust code
#21638 opened Apr 2, 2026 by cnuss Loading…
5 tasks done
1
3
Actions: Add four experimental queries Actions Analysis of GitHub Actions documentation
#21624 opened Mar 31, 2026 by JamieMagee Loading…
18
Actions: Removed a false positive injection sink model for theveracode/veracode-sca action. Actions Analysis of GitHub Actions documentation
#21604 opened Mar 27, 2026 by XinyuZhangXvX Loading…
3
Actions: Add taint summary for suisei-cn/actions-download-file url input Actions Analysis of GitHub Actions documentation
#21600 opened Mar 27, 2026 by XinyuZhangXvX Loading…
1
Qlucie trigger documentation
#21524 opened Mar 20, 2026 by sam-robson Loading…
3
Actions: Update reference link Actions Analysis of GitHub Actions documentation
#21295 opened Feb 8, 2026 by thatrobotdev Loading…
Rust: Exclude self parameter accesses from rust/access-after-lifetime-ended documentation Rust Pull requests that update Rust code
#21155 opened Jan 12, 2026 by geoffw0 Contributor Loading…
3 tasks done
5
JS: Only exclude JS files in the tsconfig outDir documentation JS
#21121 opened Jan 8, 2026 by asgerf Contributor • Draft
1
1
Actions: Add new query actions/code-injection/low for code injection with step outputs Actions Analysis of GitHub Actions documentation
#20974 opened Dec 5, 2025 by owen-mc Contributor Loading…
3
Actions: improve improper access control query Actions Analysis of GitHub Actions documentation
#20904 opened Nov 25, 2025 by redsun82 Contributor Loading…
1
5
Rust: Improve models for conversions documentation Rust Pull requests that update Rust code
#20875 opened Nov 19, 2025 by geoffw0 Contributor • Draft
1 of 4 tasks
C#: Overlay annotations. C# documentation
#20756 opened Nov 4, 2025 by michaelnebel Contributor • Draft
Bump the go_modules group across 2 directories with 3 updates dependencies Pull requests that update a dependency file documentation Go
#20608 opened Oct 9, 2025 by dependabot Bot Loading…
2
Crypto: Add BouncyCastle signatures and block cipher modes documentation Java
#20575 opened Oct 2, 2025 by nicolaswill Contributor Loading…
2
JS: Module system refactoring documentation JS
#20414 opened Sep 11, 2025 by asgerf Contributor • Draft
1
JS: Deprecate getAnExportedSymbol() and remove DubiousImport.ql documentation JS
#20412 opened Sep 11, 2025 by asgerf Contributor • Draft
1
Python: Refine the location of flask.request flow sources documentation Python
#20281 opened Aug 25, 2025 by tausbn Contributor • Draft
4
Just: introduce common "verbs" Actions Analysis of GitHub Actions C# C++ documentation Go Java JS Kotlin Python Ruby Rust Pull requests that update Rust code Swift
#19978 opened Jul 4, 2025 by redsun82 Contributor Loading…
5
Enhance cpp/overflow-calculated - detect out-of-bounds write caused by passing the buffer size in bytes (using sizeof) instead of the number of elements to wcsftime, allowing the function to overrun the allocated buffer. C++ documentation
#19722 opened Jun 10, 2025 by felickz Contributor • Draft
3
ProTip! Adding no:label will show everything without a label.