-
Notifications
You must be signed in to change notification settings - Fork 2.1k
Pull requests: github/codeql
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Rust: Add a couple of new metrics to rust/summary/summary-statistics.
no-change-note-required
This PR does not need a change note
Rust
Pull requests that update Rust code
#22328
opened Aug 12, 2026 by
geoffw0
Contributor
Loading…
Java: gate AGP-7.x Android integration tests off linux-arm64
Java
#22327
opened Aug 12, 2026 by
redsun82
Contributor
Loading…
Bazel: Update to latest This PR should only be merged in sync with an internal Semmle PR
documentation
rules_cc, rules_swift, and apple_support
depends on internal PR
#22325
opened Aug 12, 2026 by
jketema
Contributor
Loading…
Rust: Add unsafe deserialization query (CWE-502)
documentation
Rust
Pull requests that update Rust code
#22324
opened Aug 12, 2026 by
lcmangalagiri
Loading…
Rust: Add command injection query (CWE-078)
documentation
Rust
Pull requests that update Rust code
#22323
opened Aug 12, 2026 by
lcmangalagiri
Loading…
[C#] Recognize RequireAntiforgeryToken attributes
C#
documentation
#22322
opened Aug 11, 2026 by
theinfosecguy
Contributor
Loading…
Migrate pull request automation away from pull_request_target
no-change-note-required
This PR does not need a change note
#22321
opened Aug 11, 2026 by
mrecachinas
Member
Loading…
Data flow: Earlier pruning based on This PR does not need a change note
accessPathLimit
DataFlow Library
no-change-note-required
#22320
opened Aug 11, 2026 by
hvitved
Contributor
Loading…
Java: replace the dead
String.valueOf(CharSequence) summary with a synthetic callable
documentation
Java
#22315
opened Aug 11, 2026 by
Copilot
AI
Loading…
Python: Remove redundant collection taint summaries
no-change-note-required
This PR does not need a change note
Python
#22314
opened Aug 11, 2026 by
hvitved
Contributor
Loading…
Python: Add taint flow through list.extend and list.insert
documentation
Python
#22310
opened Aug 10, 2026 by
Copilot
AI
Loading…
JS: Add React Native Worklets "worklet" directive as a KnownDirective
documentation
JS
#22307
opened Aug 10, 2026 by
matinzd
Loading…
Python: Model ldap3 paged searches
documentation
Python
#22303
opened Aug 9, 2026 by
theinfosecguy
Contributor
Loading…
Python: Parse class bases like function arguments
Python
#22301
opened Aug 7, 2026 by
maxfischer2781
Loading…
C++: Add ECMAScript
std::regex parser
C++
documentation
#22300
opened Aug 7, 2026 by
jketema
Contributor
Loading…
Unified: Add static name binding pass
no-change-note-required
This PR does not need a change note
#22299
opened Aug 7, 2026 by
asgerf
Contributor
Loading…
Python: Ignore await and typing ellipsis as non-effectful statements
documentation
Python
#22291
opened Aug 6, 2026 by
maxfischer2781
Loading…
2 tasks done
2
Detect unpinned reusable workflows
Actions
Analysis of GitHub Actions
documentation
#22285
opened Aug 5, 2026 by
theinfosecguy
Contributor
Loading…
Actions: Fix false positives from static matrix values
Actions
Analysis of GitHub Actions
documentation
#22270
opened Aug 3, 2026 by
JarLob
Contributor
Loading…
Java: model org.apache.commons.xml XmlFactories as safe XXE sources
documentation
Java
#22269
opened Aug 2, 2026 by
ppkarwasz
Loading…
5 tasks done
C#: Improve ASP.NET Core MVC controller discovery
C#
documentation
#22265
opened Jul 31, 2026 by
JarLob
Contributor
Loading…
Actions: Add new models for external actions/workflows
Actions
Analysis of GitHub Actions
documentation
#22263
opened Jul 31, 2026 by
JarLob
Contributor
Loading…
build(deps): bump platforms from 1.0.0 to 1.1.0
bazel
Pull requests that update bazel code
dependencies
Pull requests that update a dependency file
#22254
opened Jul 30, 2026 by
dependabot
Bot
Loading…
Previous Next
ProTip!
Filter pull requests by the default branch with base:main.