Skip to content

Pull requests: github/codeql

New pull request New
Clear current search query, filters, and sorts
45 Open 3,740 Closed
45 Open 3,740 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

C#: Make a more principled fix in ConstantCondition. C# no-change-note-required This PR does not need a change note
#21272 opened Feb 5, 2026 by aschackmull Contributor • Draft
Go: Add overlay test Go no-change-note-required This PR does not need a change note
#21377 opened Feb 26, 2026 by owen-mc Contributor • Draft
JS: Refactor Nest test suite with inline expectations JS no-change-note-required This PR does not need a change note
#19514 opened May 19, 2025 by Napalys Contributor • Draft
JS: Use clearsContent from variable-capture output JS no-change-note-required This PR does not need a change note
#21398 opened Mar 2, 2026 by asgerf Contributor • Draft
JS: Account for ExtendCalls in localFieldStep JS no-change-note-required This PR does not need a change note
#16057 opened Mar 26, 2024 by asgerf Contributor • Draft
Python: Port InconsistentMRO.ql no-change-note-required This PR does not need a change note Python
#21687 opened Apr 9, 2026 by tausbn Contributor • Draft
Python: Port NonIteratorInForLoop.ql no-change-note-required This PR does not need a change note Python
#21688 opened Apr 9, 2026 by tausbn Contributor • Draft
Python: Port ContainsNonContainer.ql no-change-note-required This PR does not need a change note Python
#21680 opened Apr 9, 2026 by tausbn Contributor • Draft
Data flow: track AP length in stage 2 DataFlow Library no-change-note-required This PR does not need a change note
#17337 opened Aug 29, 2024 by asgerf Contributor • Draft
Ruby: remove some unneeded code from ConditionalBypass no-change-note-required This PR does not need a change note Ruby
#18569 opened Jan 23, 2025 by asgerf Contributor • Draft
C++: Use 'FeatureEqualSourceSinkCallContext' in cpp/use-after-free and cpp/double-free C++ no-change-note-required This PR does not need a change note
#16126 opened Apr 4, 2024 by MathiasVP Contributor • Draft
Shared: support quoted operands in access path components C# Go Java JS no-change-note-required This PR does not need a change note Python Ruby Swift
#13441 opened Jun 13, 2023 by asgerf Contributor • Draft
Ruby: use flow-insensitive capture flow in flowsTo and type tracking no-change-note-required This PR does not need a change note Ruby
#11010 opened Oct 27, 2022 by asgerf Contributor • Draft
Ruby: remember data flow direction on module nodes no-change-note-required This PR does not need a change note Ruby
#13626 opened Jun 29, 2023 by asgerf Contributor • Draft
Go: Remove toolchain directive from go/extractor/go.mod Go no-change-note-required This PR does not need a change note
#21307 opened Feb 11, 2026 by owen-mc Contributor Loading…
1
Go: improve tests for varargs flow Go no-change-note-required This PR does not need a change note
#21269 opened Feb 4, 2026 by owen-mc Contributor Loading…
1
[DO NOT MERGE] Prior: Test PR JS no-change-note-required This PR does not need a change note
#19285 opened Apr 11, 2025 by navntoft Contributor Loading…
1
Python: Port HashedButNoHash.ql no-change-note-required This PR does not need a change note Python
#21686 opened Apr 9, 2026 by tausbn Contributor • Draft
1
Python: Use _one_ parameter position for normal parameters no-change-note-required This PR does not need a change note Python
#12468 opened Mar 9, 2023 by RasmusWL Member • Draft
1
JS: use the class hierarchy from TypeScript in the callgraph Awaiting evaluation Do not merge yet, this PR is waiting for an evaluation to finish JS no-change-note-required This PR does not need a change note
#5694 opened Apr 16, 2021 by erik-krogh Contributor • Draft
1
Avoid inconsistent implicit toString on potential string subtypes DataFlow Library no-change-note-required This PR does not need a change note
#21318 opened Feb 12, 2026 by ginsbach Contributor Loading…
2
JS: Expose whether an endpoint name is synthetic JS no-change-note-required This PR does not need a change note
#15975 opened Mar 19, 2024 by asgerf Contributor Loading…
2
Java: exclude parameterless static methods from DataFlowTargetApi and from ExternalApi Java no-change-note-required This PR does not need a change note
#11717 opened Dec 15, 2022 by jcogs33 Contributor • Draft
2
JS: Support value access paths in MaD type columns JS no-change-note-required This PR does not need a change note
#16037 opened Mar 25, 2024 by asgerf Contributor • Draft
2
C++: Also handle PhiInstructions in Expr::getInstruction C++ no-change-note-required This PR does not need a change note
#13622 opened Jun 29, 2023 by MathiasVP Contributor Loading…
2
ProTip! What’s not been updated in a month: updated:<2026-03-30.