Skip to content

Pull requests: github/codeql

New pull request New
Clear current search query, filters, and sorts
5 Open 1,976 Closed
5 Open 1,976 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

C#: Include parameters and their defaults in the CFG C# Java no-change-note-required This PR does not need a change note
#21759 by hvitved Contributor was merged Apr 30, 2026 Loading…
11
Revert "Release preparation for version 2.25.3" Actions Analysis of GitHub Actions C# C++ DataFlow Library documentation Go Java JS Python Ruby Rust Pull requests that update Rust code Swift
#21758 by mbg Member was merged Apr 27, 2026 Loading…
4
Move generated MaDs into modelgenerator/ C# C++ Java no-change-note-required This PR does not need a change note Rust Pull requests that update Rust code
#21751 by jacknojo Contributor was merged Apr 29, 2026 Loading…
11
C#: Move handling of callables into shared control flow library C# Java no-change-note-required This PR does not need a change note
#21743 by hvitved Contributor was merged Apr 23, 2026 Loading…
19
Java: fix bug in partial path traversal documentation Java
#21734 by owen-mc Contributor was merged Apr 20, 2026 Loading…
4
Java: Add XXE sink model for Woodstox WstxInputFactory documentation Java
#21718 by chmodxxx Contributor was merged Apr 17, 2026 Loading…
5
Java: add RegexpCheckBarrier to trust-boundary-violation sanitizers documentation Java
#21656 by MarkLee131 Contributor was merged Apr 29, 2026 Loading…
7
Java: treat hash/encrypt/digest methods as sensitive-log sanitizers documentation Java
#21654 by MarkLee131 Contributor was merged Apr 30, 2026 Loading…
1
5
Java: recognize Path.toRealPath() as path normalization sanitizer documentation Java
#21652 by MarkLee131 Contributor was merged Apr 23, 2026 Loading…
1
1
Java: reduce false positives in sensitive-log documentation Java
#21650 by MarkLee131 Contributor was merged Apr 21, 2026 Loading…
1
6
Exclude bounds-check arithmetic from tainted-arithmetic sinks documentation Java
#21608 by MarkLee131 Contributor was merged Mar 29, 2026 Loading…
1
10
Add EC to secure algorithm whitelist for Java CWE-327 query documentation Java
#21594 by MarkLee131 Contributor was merged Mar 28, 2026 Loading…
1
14
Shared: update code comments explaining models-as-data format to include barriers and barrier guards C# C++ DataFlow Library Go Java JS no-change-note-required This PR does not need a change note Python Ruby Rust Pull requests that update Rust code Swift
#21584 by owen-mc Contributor was merged Apr 14, 2026 Loading…
16
Kotlin: update to 2.3.20 depends on internal PR This PR should only be merged in sync with an internal Semmle PR documentation Java Kotlin
#21583 by redsun82 Contributor was merged Apr 2, 2026 Loading…
2
C#: Replace CFG with the shared implementation C# documentation Java
#21565 by aschackmull Contributor was merged Apr 21, 2026 Loading…
33
Document models-as-data barriers and barrier guards and add change notes C# C++ documentation Go Java JS Python ready-for-doc-review This PR requires and is ready for review from the GitHub docs team. Ruby Rust Pull requests that update Rust code
#21523 by owen-mc Contributor was merged Apr 21, 2026 Loading…
51
Java: Accept new test results after JDK 26 extractor upgrade depends on internal PR This PR should only be merged in sync with an internal Semmle PR Java Kotlin no-change-note-required This PR does not need a change note
#21494 by IdrissRio Contributor was merged Apr 7, 2026 Loading…
1
Adjust @security-severity metadata for XSS and log injection queries C# C++ documentation Go Java Python Ruby Rust Pull requests that update Rust code Swift
#21472 by owen-mc Contributor was merged Mar 18, 2026 Loading…
5
Cfg: Share more code for switch statements. Java no-change-note-required This PR does not need a change note
#21441 by aschackmull Contributor was merged Mar 10, 2026 Loading…
4
C++: Add model validation for constructor summary models C# C++ Java no-change-note-required This PR does not need a change note
#21426 by owen-mc Contributor was merged Mar 10, 2026 Loading…
5
Merge back rc/3.21 into main Actions Analysis of GitHub Actions C# C++ DataFlow Library documentation Go Java JS Python Ruby Rust Pull requests that update Rust code Swift
#21423 by oscarsj Member was merged Mar 6, 2026 Loading…
3
Java: validate constructor summary models Java no-change-note-required This PR does not need a change note
#21415 by owen-mc Contributor was merged Mar 6, 2026 Loading…
6
Java: Make Assignment extend BinaryExpr. documentation Java Kotlin
#21412 by aschackmull Contributor was merged Mar 5, 2026 Loading…
3
Inline expectation tests should always have space before and after $ C# C++ documentation Go Java JS Python Ruby Rust Pull requests that update Rust code Swift
#21405 by owen-mc Contributor was merged Mar 5, 2026 Loading…
18
Cfg: Small tweaks. Java no-change-note-required This PR does not need a change note
#21403 by aschackmull Contributor was merged Mar 4, 2026 Loading…
2
ProTip! Type g i on any issue or pull request to go back to the issue listing page.