Skip to content

Pull requests: github/codeql

New pull request New
Clear current search query, filters, and sorts
85 Open 3,853 Closed
85 Open 3,853 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

docs: Add 'Customizing library models for Rust' documentation documentation ready-for-doc-review This PR requires and is ready for review from the GitHub docs team.
#21727 opened Apr 17, 2026 by coadaflorin Contributor Loading…
52
[Go] Add Unicode Bypass Validation query, test and help file documentation Go no-change-note-required This PR does not need a change note
#12994 opened May 2, 2023 by Sim4n6 Contributor Loading…
44
Add CodeQL support and tests for Micronaut framework documentation Java
#21387 opened Feb 27, 2026 by nicolaswill Contributor Loading…
38
Java: Unbounded Allocation queries documentation Java
#4582 opened Oct 30, 2020 by joefarebrother Contributor Loading…
32
C++: Global value numbering for function calls C# C++ documentation
#9892 opened Jul 25, 2022 by rdmarsh2 Contributor Loading…
25
[Java] Add Unicode Bypass Validation query, test and help file documentation Java
#12995 opened May 2, 2023 by Sim4n6 Contributor Loading…
24
Swift: Risky or Broken Cryptographic Algorithm Query documentation Swift
#13649 opened Jul 3, 2023 by d10c Contributor • Draft
1
24
Go: Support Go 1.23 (Explicit aliases) documentation Go
#17058 opened Jul 24, 2024 by mbg Member Loading…
24
[Javascript] CWE-348: Client supplied ip used in security check documentation JS
#6864 opened Oct 13, 2021 by yabeow • Draft
23
Swift: Query for escaping parameters of unsafe closures documentation Swift
#13706 opened Jul 10, 2023 by rdmarsh2 Contributor • Draft
22
Go: Add JWT Algorithm Confusion Query documentation Go
#14534 opened Oct 18, 2023 by Kwstubbs Contributor Loading…
20
Jb1/zipslip performance fix upstream C# documentation
#15558 opened Feb 8, 2024 by ropwareJB Contributor Loading…
19
Actions: Add four experimental queries Actions Analysis of GitHub Actions documentation
#21624 opened Mar 31, 2026 by JamieMagee Loading…
18
Java: Big Decimal DOS documentation Java
#6730 opened Sep 22, 2021 by tonghuaroot Loading…
17
Ruby: add XML tables to dbscheme documentation Ruby
#10863 opened Oct 17, 2022 by aibaars Contributor • Draft
16
C#: Add query for insecure certificate validation C# documentation
#16824 opened Jun 25, 2024 by intrigus-lgtm Contributor • Draft
12
[JS]: Adding express-validator support documentation JS
#18252 opened Dec 9, 2024 by GeekMasher Contributor Loading…
2 of 7 tasks
12
JS: add new query: js/unclosed-stream Awaiting evaluation Do not merge yet, this PR is waiting for an evaluation to finish documentation JS
#3682 opened Jun 11, 2020 by esbena Contributor • Draft
2 of 3 tasks
11
Add client-response Threat Model and update JS ClientsRequests documentation JS
#19656 opened Jun 3, 2025 by GeekMasher Contributor Loading…
9
C# SSRF Improvements C# documentation
#20284 opened Aug 26, 2025 by Kwstubbs Contributor Loading…
9
Add auto-remediation to InsecureDependencyResolution.qhelp documentation Java
#8790 opened Apr 20, 2022 by JLLeitschuh Contributor Loading…
1
9
C#: Insecure Certificate Validation. C# documentation
#17603 opened Sep 27, 2024 by michaelnebel Contributor • Draft
9
Actions: Add workflow_dispatch and workflow_call input sources for code injection Actions Analysis of GitHub Actions documentation
#21660 opened Apr 6, 2026 by tspascoal Contributor Loading…
8
Fix/path injection read subkind documentation Java
#21741 opened Apr 21, 2026 by MarkLee131 Contributor Loading…
5 tasks done
1
8
Java: Adapt unsafe deserialization to SnakeYaml 2.0, which is secure by default documentation Java
#13347 opened Jun 1, 2023 by jorgectf Contributor Loading…
8
ProTip! Adding no:label will show everything without a label.