Skip to content

Pull requests: github/codeql

New pull request New
430 Open 16,826 Closed
430 Open 16,826 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Update CSV framework coverage reports
#22156 opened Jul 10, 2026 by github-actions Bot Loading…
Make actions/unpinned-tag lockfile- and $/-aware Actions Analysis of GitHub Actions documentation
#22155 opened Jul 10, 2026 by nodeselector • Draft
1
Actions Query Fix: UntrustedCheckoutTOCTOU[High|Critical] ControlCheck model fix Actions Analysis of GitHub Actions
#22154 opened Jul 9, 2026 by knewbury01 Contributor Loading…
1
Post-release preparation for codeql-cli-2.26.1 Actions Analysis of GitHub Actions C# C++ DataFlow Library documentation Go Java JS Python Ruby Rust Pull requests that update Rust code Swift
#22152 opened Jul 9, 2026 by codeql-ci Collaborator • Draft
@oscarsj
Go: Fix incorrect path injection sanitizer FilePath.Rel documentation Go
#22150 opened Jul 9, 2026 by owen-mc Contributor Loading…
1
Support MISSING promotion and SPURIOUS clearing in --learn inline expectations C# C++ Go Java JS Python QL-for-QL Ruby Rust Pull requests that update Rust code Swift
#22148 opened Jul 9, 2026 by d10c Contributor • Draft
Go: skip extracting ast.ParenExpr nodes Go
#22146 opened Jul 9, 2026 by owen-mc Contributor • Draft
FlowSummaryImpl: Embed AST nodes in source/sink summary nodes for better locations C# C++ DataFlow Library Go Java JS Python Ruby Rust Pull requests that update Rust code Swift
#22145 opened Jul 9, 2026 by hvitved Contributor • Draft
2
JS: Model Sails Action2 inputs as remote sources documentation JS
#22142 opened Jul 9, 2026 by theinfosecguy Loading…
1
1
Support --learn for inline expectations via learnEdits C# C++ Go Java JS Python QL-for-QL Ruby Rust Pull requests that update Rust code Swift
#22140 opened Jul 8, 2026 by d10c Contributor • Draft
3
Java: Support JDK 27 documentation Java
#22138 opened Jul 8, 2026 by IdrissRio Contributor • Draft
TEMP PR C# C++ DataFlow Library Go Java JS Python Ruby Rust Pull requests that update Rust code Swift
#22137 opened Jul 8, 2026 by hvitved Contributor • Draft
2
Unify Kotlin test suites Java Kotlin
#22135 opened Jul 8, 2026 by andersfugmann Contributor • Draft
Introduce canonicalization library for Windows subst drives C# depends on internal PR This PR should only be merged in sync with an internal Semmle PR Go Java JS Kotlin Python Ruby Rust Pull requests that update Rust code
#22129 opened Jul 6, 2026 by jketema Contributor • Draft
Java: Tolerate JDK 27 documentation Java
#22128 opened Jul 6, 2026 by IdrissRio Contributor • Draft
JS: Convert qlref tests to inline expectations JS
#22126 opened Jul 5, 2026 by owen-mc Contributor Loading…
4
Bump the maven group across 30 directories with 11 updates dependencies Pull requests that update a dependency file Java
#22122 opened Jul 4, 2026 by dependabot Bot Loading…
Python: unpin legacy CFG/ESSA from the AST cached stage (DCA measurement) Python
#22116 opened Jul 2, 2026 by yoff Contributor • Draft
C++: Support access paths for flow sources C++
#22113 opened Jul 2, 2026 by MathiasVP Contributor • Draft
1
yeast: Prepare for type checking of rules documentation no-change-note-required This PR does not need a change note
#22112 opened Jul 2, 2026 by tausbn Contributor Loading…
3
Swift: Turn off caching and integrated driver in autobuild Swift
#22111 opened Jul 2, 2026 by jketema Contributor Loading…
5
Add subst drive resolution to Kotlin and Go extractors Go Kotlin
#22107 opened Jul 2, 2026 by Copilot AI • Draft
@jketema
unified: Test CI checks
#22102 opened Jul 1, 2026 by asgerf Contributor • Draft
Python: revert "remove imprecise container steps" for performance reasons Python
#22098 opened Jun 30, 2026 by owen-mc Contributor Loading…
2
Python: reintroduce instance-attribute type-tracking without the classInstanceTracker blow-up documentation Python
#22097 opened Jun 30, 2026 by Copilot AI Loading…
@owen-mc
4
ProTip! Exclude everything labeled bug with -label:bug.