Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
9.9k
Code
Issues
995
Pull requests
445
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
go
ql
src
experimental
on
codeql-cli/v2.13.4
User selector
All users
All time
Commit history
Commits on May 11, 2023
Merge pull request #12901 from porcupineyhairs/goDsn
Show description for ee64ea5
smowton
authored
ee64ea5
View commit details
Copy full SHA for ee64ea5
View code at this point
Browse repository at this point
Fix spelling
smowton
authored
99f4eef
View commit details
Copy full SHA for 99f4eef
View code at this point
Browse repository at this point
Fix spelling and remove dead code
smowton
authored
a10b11e
View commit details
Copy full SHA for a10b11e
View code at this point
Browse repository at this point
Fix duplicate query ID
smowton
authored
b6c2db6
View commit details
Copy full SHA for b6c2db6
View code at this point
Browse repository at this point
Include changes from review
Porcupiney Hairs
committed
2c518c1
View commit details
Copy full SHA for 2c518c1
View code at this point
Browse repository at this point
Include changes from review
Porcupiney Hairs
committed
ae6fda0
View commit details
Copy full SHA for ae6fda0
View code at this point
Browse repository at this point
Go : Add query to detect potential timing attacks
Porcupiney Hairs
committed
d536157
View commit details
Copy full SHA for d536157
View code at this point
Browse repository at this point
Merge pull request #11732 from owen-mc/go/fix/model-data-flow-through-varargs
Show description for 270ba09
owen-mc
authored
270ba09
View commit details
Copy full SHA for 270ba09
View code at this point
Browse repository at this point
Commits on May 10, 2023
Go: Add query to detect DSN Injection.
Porcupiney Hairs
committed
ec424d7
View commit details
Copy full SHA for ec424d7
View code at this point
Browse repository at this point
address review comments
owen-mc
committed
1c66564
View commit details
Copy full SHA for 1c66564
View code at this point
Browse repository at this point
Commits on May 3, 2023
Go: Make implicit this receivers explicit
kaspersv
committed
e969018
View commit details
Copy full SHA for e969018
View code at this point
Browse repository at this point
Commits on Apr 28, 2023
use CallNode.getSyntacticArgument
owen-mc
committed
bc0f903
View commit details
Copy full SHA for bc0f903
View code at this point
Browse repository at this point
Commits on Apr 27, 2023
Go: Update `html-template-escaping-passthrough`
Show description for 72b0828
mbg
committed
72b0828
View commit details
Copy full SHA for 72b0828
View code at this point
Browse repository at this point
Commits on Apr 4, 2023
Merge pull request #12396 from porcupineyhairs/GoJwtSignImprovements
Show description for 00fd23d
owen-mc
authored
00fd23d
View commit details
Copy full SHA for 00fd23d
View code at this point
Browse repository at this point
Commits on Mar 31, 2023
Go: Add more JWT sinks
Show description for e9615c5
Porcupiney Hairs
committed
e9615c5
View commit details
Copy full SHA for e9615c5
View code at this point
Browse repository at this point
Fix variable names in QLDocs
owen-mc
committed
cf89b00
View commit details
Copy full SHA for cf89b00
View code at this point
Browse repository at this point
Fix formatting of QLDocs
owen-mc
committed
513409e
View commit details
Copy full SHA for 513409e
View code at this point
Browse repository at this point
Remove fields which are only used in char pred
owen-mc
committed
7a25200
View commit details
Copy full SHA for 7a25200
View code at this point
Browse repository at this point
No need for singleton set
owen-mc
committed
a113b8e
View commit details
Copy full SHA for a113b8e
View code at this point
Browse repository at this point
Commits on Feb 7, 2023
Consolidate repeated calls to `matches` and `regexpMatch`
Show description for 99d3f68
smowton
committed
99d3f68
View commit details
Copy full SHA for 99d3f68
View code at this point
Browse repository at this point
Commits on Feb 6, 2023
Fix files that gofmt can't parse
Show description for 9ed7836
owen-mc
committed
9ed7836
View commit details
Copy full SHA for 9ed7836
View code at this point
Browse repository at this point
Commits on Jan 11, 2023
Merge branch 'main' into turbo/experimental/combined
turbo
authored
c3116b3
View commit details
Copy full SHA for c3116b3
View code at this point
Browse repository at this point
Commits on Jan 10, 2023
Go: Remove omittable exists variables
atorralba
committed
7a92970
View commit details
Copy full SHA for 7a92970
View code at this point
Browse repository at this point
Commits on Dec 14, 2022
Tag all security queries in supported languages' experimental directories with an experimental tag
turbo
committed
4ec401a
View commit details
Copy full SHA for 4ec401a
View code at this point
Browse repository at this point
Commits on Nov 17, 2022
Rename predicates to avoid clashes
owen-mc
committed
f2e2c02
View commit details
Copy full SHA for f2e2c02
View code at this point
Browse repository at this point
Commits on Nov 3, 2022
go: make sure the source/sink have the same type as the `edges` relation
erik-krogh
committed
f9195d1
View commit details
Copy full SHA for f9195d1
View code at this point
Browse repository at this point
go: add a precision tag to go/examples/deferinloop
erik-krogh
committed
c9fcef2
View commit details
Copy full SHA for c9fcef2
View code at this point
Browse repository at this point
Commits on Oct 11, 2022
spelling: cryptographically
Show description for e6998d4
jsoref
committed
e6998d4
View commit details
Copy full SHA for e6998d4
View code at this point
Browse repository at this point
spelling: characters
Show description for 9b372f3
jsoref
committed
9b372f3
View commit details
Copy full SHA for 9b372f3
View code at this point
Browse repository at this point
spelling: against
Show description for b105299
jsoref
committed
b105299
View commit details
Copy full SHA for b105299
View code at this point
Browse repository at this point
Commits on Oct 7, 2022
fix some more style-guide violations in the alert-messages
erik-krogh
committed
d5c4505
View commit details
Copy full SHA for d5c4505
View code at this point
Browse repository at this point
Commits on Sep 20, 2022
reword alert-message `go/user-controlled-bypass` to avoid using "here"
erik-krogh
committed
175d3ac
View commit details
Copy full SHA for 175d3ac
View code at this point
Browse repository at this point
make the alert messages of taint-tracking queries more consistent
erik-krogh
committed
3cf5516
View commit details
Copy full SHA for 3cf5516
View code at this point
Browse repository at this point
Commits on Sep 9, 2022
ensure consistent casing of names
erik-krogh
committed
26d8553
View commit details
Copy full SHA for 26d8553
View code at this point
Browse repository at this point
Commits on Aug 25, 2022
Merge pull request #9816 from erik-krogh/msgConsis
Show description for 06afe9c
erik-krogh
authored
06afe9c
View commit details
Copy full SHA for 06afe9c
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.