pullrequests Search Results · repo:github/codeql language:CodeQL is:public is:public
Filter by
17k results (131 ms)
17k results
ingithub/codeql (press backspace or delete to remove)…and Google GenAI SDKs
Add experimental CodeQL query detecting prompt injection vulnerabilities in JavaScript/TypeScript applications using AI
SDK libraries.
Modeled frameworks:
- openai (OpenAI, ...
documentation
JS
Updates the inline type test expectations to follow the same format as in https://github.com/github/codeql/pull/21777.
For example, for a variable x of type Result Option i32 , bool we would previously ...
no-change-note-required
Rust
Adds a bunch of test cases for verifying inferred types, similar to what we have for Rust. Most of the tests have been
written using Copilot CLI, but I have verified and tweaked them manually afterwards. ...
no-change-note-required
Swift
Add sources/sinks for Jakartaee REST library, specifically this commit/subpath.
Java
Before this PR, inline expectation comments with optional tags were simply ignored, which is most likely not what was
intended.
With this PR, inline expectation comments with optional tags are instead ...
no-change-note-required
This PR fixes a performance problem in cpp/leap-year/unchecked-after-arithmetic-year-modification which was caused by
https://github.com/github/codeql/pull/21292.
The problem can be seen in this partial ...
C++
no-change-note-required
See individual commit messages for further details.
C++
documentation
Pretty simple stuff. We just add source and flow summary models for
https://learn.microsoft.com/en-us/windows/win32/menurc/strsafe-ovw
C++
documentation
Pin the Rust toolchain used by integration tests to 1.94.1 to prevent breakage from runner images that ship newer
versions.
Changes
- rust/ql/integration-tests/conftest.py:
- Add autouse _pin_rust_toolchain ...
Rust