Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Type
/
to search
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
9.9k
Code
Issues
998
Pull requests
447
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
python
ql
src
Security
on
codeql-cli/v2.13.5
User selector
All users
All time
Commit history
Commits on Jun 2, 2023
Update `py/unsafe-deserialization` name
jorgectf
committed
5608082
View commit details
Copy full SHA for 5608082
View code at this point
Browse repository at this point
Commits on May 25, 2023
also fix the first code-block
erik-krogh
committed
9f5bf8f
View commit details
Copy full SHA for 9f5bf8f
View code at this point
Browse repository at this point
fix whitespace in the samples in ReDoS.qhelp
erik-krogh
committed
765076b
View commit details
Copy full SHA for 765076b
View code at this point
Browse repository at this point
Commits on May 21, 2023
apply suggestions from doc review
erik-krogh
committed
710b309
View commit details
Copy full SHA for 710b309
View code at this point
Browse repository at this point
Commits on May 17, 2023
avoid contractions
erik-krogh
committed
480e71f
View commit details
Copy full SHA for 480e71f
View code at this point
Browse repository at this point
Commits on May 15, 2023
trim the whitespace in the poly-redos examples
erik-krogh
committed
83ca149
View commit details
Copy full SHA for 83ca149
View code at this point
Browse repository at this point
add another example to the qhelp in poly-redos, showing how to just limit the length of the input
erik-krogh
committed
d989359
View commit details
Copy full SHA for d989359
View code at this point
Browse repository at this point
Commits on May 11, 2023
Merge pull request #12552 from erik-krogh/py-type-trackers
Show description for 62f0c64
RasmusWL
authored
62f0c64
View commit details
Copy full SHA for 62f0c64
View code at this point
Browse repository at this point
Commits on May 3, 2023
Python: Make implicit this receivers explicit
kaspersv
committed
3eb5a95
View commit details
Copy full SHA for 3eb5a95
View code at this point
Browse repository at this point
Commits on May 1, 2023
introduce RegExpInterpretation instead of RegexString, and move RegexTreeView.qll into a regexp folder
erik-krogh
committed
f0254fc
View commit details
Copy full SHA for f0254fc
View code at this point
Browse repository at this point
Commits on Apr 18, 2023
Python: Expand modeling of `paramiko`
RasmusWL
committed
a168af3
View commit details
Copy full SHA for a168af3
View code at this point
Browse repository at this point
Commits on Mar 27, 2023
Merge branch 'main' into python/rewrite-InsecureContextConfiguration
yoff
authored
2121ed7
View commit details
Copy full SHA for 2121ed7
View code at this point
Browse repository at this point
Commits on Mar 24, 2023
python: rewrite comment
yoff
committed
3c407ea
View commit details
Copy full SHA for 3c407ea
View code at this point
Browse repository at this point
python: move comment
yoff
committed
8ea4878
View commit details
Copy full SHA for 8ea4878
View code at this point
Browse repository at this point
Update python/ql/src/Security/CWE-327/PyOpenSSL.qll
Show description for cf4eac6
yoff
and
RasmusWL
authored
cf4eac6
View commit details
Copy full SHA for cf4eac6
View code at this point
Browse repository at this point
Commits on Mar 23, 2023
Python/Ruby/Swift: Rename references.
aschackmull
committed
d0b7ffd
View commit details
Copy full SHA for d0b7ffd
View code at this point
Browse repository at this point
Commits on Mar 13, 2023
lower precision of py/shell-command-constructed-from-input to medium
erik-krogh
committed
6a5d6eb
View commit details
Copy full SHA for 6a5d6eb
View code at this point
Browse repository at this point
Merge branch 'main' into py-shell
erik-krogh
committed
d001cc4
View commit details
Copy full SHA for d001cc4
View code at this point
Browse repository at this point
Commits on Mar 10, 2023
Python: Autoformat
aschackmull
committed
21d5fa8
View commit details
Copy full SHA for 21d5fa8
View code at this point
Browse repository at this point
Commits on Mar 7, 2023
python: remove protocol family
Show description for 072df5d
yoff
committed
072df5d
View commit details
Copy full SHA for 072df5d
View code at this point
Browse repository at this point
Commits on Mar 6, 2023
Python: small clean-up
Show description for 8160f74
yoff
committed
8160f74
View commit details
Copy full SHA for 8160f74
View code at this point
Browse repository at this point
Merge pull request #12186 from aschackmull/dataflow/refactor-configuration
Show description for 5c7f2ac
aschackmull
authored
5c7f2ac
View commit details
Copy full SHA for 5c7f2ac
View code at this point
Browse repository at this point
Commits on Mar 1, 2023
Python: Adjust InsecureProtocol query.
aschackmull
committed
34cc938
View commit details
Copy full SHA for 34cc938
View code at this point
Browse repository at this point
Commits on Feb 27, 2023
Merge pull request #11376 from RasmusWL/call-graph-code
Show description for 25043f5
tausbn
authored
25043f5
View commit details
Copy full SHA for 25043f5
View code at this point
Browse repository at this point
Commits on Feb 15, 2023
fix various nits based on feedback
erik-krogh
committed
7598549
View commit details
Copy full SHA for 7598549
View code at this point
Browse repository at this point
Commits on Feb 14, 2023
Python: Update a few examples so queries work on them
Show description for dc5bb4f
RasmusWL
committed
dc5bb4f
View commit details
Copy full SHA for dc5bb4f
View code at this point
Browse repository at this point
Commits on Feb 3, 2023
add `py/shell-command-constructed-from-input`, but without a source.
Show description for 7fcc548
erik-krogh
committed
7fcc548
View commit details
Copy full SHA for 7fcc548
View code at this point
Browse repository at this point
Commits on Jan 17, 2023
Python: `ExternalAPIs.qll`: Swap order of classes
Show description for ae1d4de
RasmusWL
and
yoff
committed
ae1d4de
View commit details
Copy full SHA for ae1d4de
View code at this point
Browse repository at this point
Python: Minor adjustment in QLDoc
Show description for 608b16c
RasmusWL
and
yoff
authored
608b16c
View commit details
Copy full SHA for 608b16c
View code at this point
Browse repository at this point
Python: Fix ql4ql
RasmusWL
committed
700e40b
View commit details
Copy full SHA for 700e40b
View code at this point
Browse repository at this point
Commits on Jan 16, 2023
Merge branch 'main' into call-graph-code
RasmusWL
committed
61151d4
View commit details
Copy full SHA for 61151d4
View code at this point
Browse repository at this point
Commits on Jan 10, 2023
Python: Remove omittable exists variables
atorralba
committed
d87c8c7
View commit details
Copy full SHA for d87c8c7
View code at this point
Browse repository at this point
Commits on Dec 17, 2022
put the shared HostnameRegexp code in the shared regex pack
erik-krogh
committed
f67d0bc
View commit details
Copy full SHA for f67d0bc
View code at this point
Browse repository at this point
Commits on Dec 8, 2022
Merge pull request #10656 from porcupineyhairs/PyPamImprove
Show description for d684dbd
RasmusWL
authored
d684dbd
View commit details
Copy full SHA for d684dbd
View code at this point
Browse repository at this point
Merge branch 'main' into call-graph-code
RasmusWL
committed
a826c4f
View commit details
Copy full SHA for a826c4f
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.