Skip to content

Pull requests: github/codeql

New pull request New
450 Open 16,914 Closed
450 Open 16,914 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Rust: Add flow models for ToOwned trait Rust Pull requests that update Rust code
#22311 opened Aug 10, 2026 by hvitved Contributor • Draft
Python: Add taint flow through list.extend and list.insert
#22310 opened Aug 10, 2026 by Copilot AI • Draft
1
@hvitved
JS: Add support for ES2022's \d flag documentation JS
#22309 opened Aug 10, 2026 by MathiasVP Contributor Loading…
5
JS: Add React Native Worklets "worklet" directive as a KnownDirective documentation JS
#22307 opened Aug 10, 2026 by matinzd Loading…
8
Ruby: Approximate FieldContent in data flow. Ruby
#22306 opened Aug 10, 2026 by aschackmull Contributor • Draft
Ciper-tube QLrepo
#22304 opened Aug 9, 2026 by ightevenmckane187 Loading…
2 tasks done
Python: Model ldap3 paged searches documentation Python
#22303 opened Aug 9, 2026 by theinfosecguy Contributor Loading…
1
Rust: Add command injection (CWE-078) and unsafe deserialization (CWE-502) queries documentation Rust Pull requests that update Rust code
#22302 opened Aug 9, 2026 by lcmangalagiri Loading…
1
Python: Parse class bases like function arguments Python
#22301 opened Aug 7, 2026 by maxfischer2781 Loading…
1
2
C++: Add ECMAScript std::regex parser C++ documentation
#22300 opened Aug 7, 2026 by jketema Contributor Loading…
9
Unified: Add static name binding pass no-change-note-required This PR does not need a change note
#22299 opened Aug 7, 2026 by asgerf Contributor Loading…
6
Ruby/regex plus implicitreturn Ruby
#22297 opened Aug 7, 2026 by aschackmull Contributor • Draft
Ruby: Switch regex tracking from TypeTracking to DataFlow. Ruby
#22296 opened Aug 7, 2026 by aschackmull Contributor Loading…
3
Python: Ignore await and typing ellipsis as non-effectful statements documentation Python
#22291 opened Aug 6, 2026 by maxfischer2781 Loading…
2 tasks done
2
Detect unpinned reusable workflows Actions Analysis of GitHub Actions documentation
#22285 opened Aug 5, 2026 by theinfosecguy Contributor Loading…
1
Java: model R2DBC SQL injection sinks documentation Java
#22279 opened Aug 4, 2026 by felickz Contributor Loading…
8
C#: Bumping C# MessagePack to v3.1.7 C#
#22277 opened Aug 4, 2026 by andrewngo Loading…
Actions: Fix false positives from static matrix values Actions Analysis of GitHub Actions documentation
#22270 opened Aug 3, 2026 by JarLob Contributor Loading…
6
Java: model org.apache.commons.xml XmlFactories as safe XXE sources documentation Java
#22269 opened Aug 2, 2026 by ppkarwasz Loading…
5 tasks done
5
C#: Improve ASP.NET Core MVC controller discovery C# documentation
#22265 opened Jul 31, 2026 by JarLob Contributor Loading…
7
Actions: Add new models for external actions/workflows Actions Analysis of GitHub Actions documentation
#22263 opened Jul 31, 2026 by JarLob Contributor Loading…
15
Ruby: Fix ExprReturnNode to handle Rescue, Ensure, and Else. no-change-note-required This PR does not need a change note Ruby
#22256 opened Jul 30, 2026 by aschackmull Contributor Loading…
2
build(deps): bump platforms from 1.0.0 to 1.1.0 bazel Pull requests that update bazel code dependencies Pull requests that update a dependency file
#22254 opened Jul 30, 2026 by dependabot Bot Loading…
QL: Autoformat test files QL-for-QL
#22232 opened Jul 24, 2026 by redsun82 Contributor Loading…
8
Python: Reduce log injection false positives documentation Python
#22231 opened Jul 23, 2026 by Ali-Razmjoo Loading…
ProTip! Filter pull requests by the default branch with base:main.