Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
10k
Code
Issues
995
Pull requests
448
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
java
ql
lib
semmle
code
on
codeql-cli-2.20.0
User selector
All users
All time
Commit history
Commits on Dec 4, 2024
Merge pull request #18191 from aschackmull/dataflow/remove-deprecated-lib
Show description for 03fdceb
aschackmull
authored
03fdceb
View commit details
Copy full SHA for 03fdceb
View code at this point
Browse repository at this point
Commits on Dec 3, 2024
Java: Delete deprecated extension points referencing deleted api.
aschackmull
committed
b12a1c0
View commit details
Copy full SHA for b12a1c0
View code at this point
Browse repository at this point
Java: Delete deprecated data flow api.
aschackmull
committed
2c0baff
View commit details
Copy full SHA for 2c0baff
View code at this point
Browse repository at this point
Shared: Move shared logic into `FlowSummaryImpl.qll`
hvitved
committed
fbeb6f3
View commit details
Copy full SHA for fbeb6f3
View code at this point
Browse repository at this point
Commits on Nov 27, 2024
Merge pull request #17901 from aschackmull/java/allowlist-sanitizer
Show description for df2e2e5
aschackmull
authored
df2e2e5
View commit details
Copy full SHA for df2e2e5
View code at this point
Browse repository at this point
Java: Add more qldoc.
aschackmull
committed
5ef496d
View commit details
Copy full SHA for 5ef496d
View code at this point
Browse repository at this point
Commits on Nov 26, 2024
Java: Address review comment, include addFirst,addLast.
aschackmull
committed
408a38d
View commit details
Copy full SHA for 408a38d
View code at this point
Browse repository at this point
Java: Add a default taint sanitizer for contains-checks on lists of constants.
aschackmull
committed
6f32c41
View commit details
Copy full SHA for 6f32c41
View code at this point
Browse repository at this point
Java: Prepare TypeFlow for separate instantiation of universal flow.
aschackmull
committed
7f86f8c
View commit details
Copy full SHA for 7f86f8c
View code at this point
Browse repository at this point
Commits on Nov 25, 2024
Java: add SHA384 to list of secure algorithms
Jami Cogswell
authored and
Jami Cogswell
committed
05b6700
View commit details
Copy full SHA for 05b6700
View code at this point
Browse repository at this point
Merge pull request #18084 from github/aibaars/java-sha3
Show description for c2b342f
aibaars
authored
c2b342f
View commit details
Copy full SHA for c2b342f
View code at this point
Browse repository at this point
Drop SHA3-224
Show description for 5eb91fd
aibaars
authored
5eb91fd
View commit details
Copy full SHA for 5eb91fd
View code at this point
Browse repository at this point
Commits on Nov 24, 2024
Merge pull request #17869 from jcogs33/jcogs33/improve-weak-crypto
Show description for f004569
jcogs33
authored
f004569
View commit details
Copy full SHA for f004569
View code at this point
Browse repository at this point
Commits on Nov 22, 2024
Java: add SHA3 family to list of secure crypto algorithms
aibaars
committed
c6eaed3
View commit details
Copy full SHA for c6eaed3
View code at this point
Browse repository at this point
Commits on Nov 14, 2024
Refactor UnreachableBasicBlock to make it clearer
owen-mc
committed
bf0fba6
View commit details
Copy full SHA for bf0fba6
View code at this point
Browse repository at this point
Fix bug in UnreachableBlocks
owen-mc
committed
efb34ae
View commit details
Copy full SHA for efb34ae
View code at this point
Browse repository at this point
Commits on Nov 7, 2024
Kotlin: Support NotNullExpr in TypeFlow.
aschackmull
committed
5602570
View commit details
Copy full SHA for 5602570
View code at this point
Browse repository at this point
Commits on Nov 6, 2024
Merge pull request #17863 from aschackmull/shared/universal-flow
Show description for 4df4a1e
aschackmull
authored
4df4a1e
View commit details
Copy full SHA for 4df4a1e
View code at this point
Browse repository at this point
Commits on Nov 3, 2024
Java: weak crypto: do not report weak hash algorithms
Jami Cogswell
authored and
Jami Cogswell
committed
459d168
View commit details
Copy full SHA for 459d168
View code at this point
Browse repository at this point
Commits on Oct 31, 2024
Merge pull request #17663 from aschackmull/dataflow/speculative-flow
Show description for b556590
aschackmull
authored
b556590
View commit details
Copy full SHA for b556590
View code at this point
Browse repository at this point
Commits on Oct 30, 2024
Java: Fix bug related to null inference for pattern initializer.
aschackmull
committed
9b493c1
View commit details
Copy full SHA for 9b493c1
View code at this point
Browse repository at this point
Commits on Oct 29, 2024
Java: Remove redundant getErasure overrides
Show description for 6c97390
igfoo
committed
6c97390
View commit details
Copy full SHA for 6c97390
View code at this point
Browse repository at this point
Commits on Oct 28, 2024
TypeFlow: Simplify interface.
aschackmull
committed
fba4d09
View commit details
Copy full SHA for fba4d09
View code at this point
Browse repository at this point
TypeFlow: Rename step to uniqStep.
aschackmull
committed
3939eff
View commit details
Copy full SHA for 3939eff
View code at this point
Browse repository at this point
Commits on Oct 21, 2024
Java: Add the clone method to the model generation exclusions.
michaelnebel
committed
786d04e
View commit details
Copy full SHA for 786d04e
View code at this point
Browse repository at this point
Commits on Oct 16, 2024
Add qldoc.
aschackmull
committed
c20f12f
View commit details
Copy full SHA for c20f12f
View code at this point
Browse repository at this point
Java: Add support for speculative taint flow.
aschackmull
committed
8b99154
View commit details
Copy full SHA for 8b99154
View code at this point
Browse repository at this point
Dataflow: add plumbing for adding provenance to state-steps.
aschackmull
committed
c80627a
View commit details
Copy full SHA for c80627a
View code at this point
Browse repository at this point
Commits on Oct 6, 2024
Merge pull request #17668 from igfoo/igfoo/typo
Show description for 927b402
owen-mc
authored
927b402
View commit details
Copy full SHA for 927b402
View code at this point
Browse repository at this point
Commits on Oct 4, 2024
Java: Typo in a comment
igfoo
committed
d24bdbb
View commit details
Copy full SHA for d24bdbb
View code at this point
Browse repository at this point
Java: Account for top-level `res` folders in `AndroidLayoutXmlFile`
hvitved
committed
2832318
View commit details
Copy full SHA for 2832318
View code at this point
Browse repository at this point
Commits on Oct 1, 2024
Merge pull request #17604 from aschackmull/java/neutral-overrides
Show description for 6081ba5
aschackmull
authored
6081ba5
View commit details
Copy full SHA for 6081ba5
View code at this point
Browse repository at this point
Commits on Sep 30, 2024
Java: Add overrides to the interpretation of neutral MaD models.
aschackmull
committed
ec0bd44
View commit details
Copy full SHA for ec0bd44
View code at this point
Browse repository at this point
Merge pull request #17579 from aschackmull/java/type-sanitizers
Show description for a017f92
aschackmull
authored
a017f92
View commit details
Copy full SHA for a017f92
View code at this point
Browse repository at this point
Commits on Sep 26, 2024
Merge pull request #17424 from RasmusWL/active-threat-model-source
Show description for 381ea93
RasmusWL
authored
381ea93
View commit details
Copy full SHA for 381ea93
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.
