-
Notifications
You must be signed in to change notification settings - Fork 2k
Pull requests: github/codeql
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Kotlin: Update tests to use new This PR should only be merged in sync with an internal Semmle PR
Java
kotlin_2_3_20 fixture
depends on internal PR
Shared CFG: allow destructuring in ForeachStmt
no-change-note-required
This PR does not need a change note
#22047
opened Jun 24, 2026 by
owen-mc
Contributor
Loading…
Use Maven Central mirror in Java Maven integration tests
Java
#22046
opened Jun 24, 2026 by
mario-campos
Contributor
Loading…
Go: Update to 1.27
depends on internal PR
This PR should only be merged in sync with an internal Semmle PR
documentation
Go
C#: Improve package download logic.
C#
documentation
#22041
opened Jun 24, 2026 by
michaelnebel
Contributor
•
Draft
Add repr() and %r sanitizers to py/log-injection query to reduce false positives
Python
#22038
opened Jun 23, 2026 by
mrigankpawagi
Contributor
Loading…
JavaScript: Recognize Angular @HostListener('window:message') as a postMessage handler
documentation
JS
#22036
opened Jun 23, 2026 by
felickz
Contributor
Loading…
Add java data extensions various
documentation
Java
#22034
opened Jun 22, 2026 by
knewbury01
Contributor
Loading…
C#: Use the feed manager in the NugetExeWrapper.
C#
documentation
#22033
opened Jun 22, 2026 by
michaelnebel
Contributor
Loading…
Python: fix py/insecure-protocol false positive on ssl.create_default_context()
documentation
Python
#22028
opened Jun 21, 2026 by
parkerbxyz
Member
•
Draft
Bump golang.org/x/text from 0.12.0 to 0.38.0 in /go/ql/test/query-tests/Security/CWE-347
dependencies
Pull requests that update a dependency file
documentation
Go
#22024
opened Jun 20, 2026 by
dependabot
Bot
Loading…
Bump github.com/gin-gonic/gin from 1.9.1 to 1.12.0 in /go/ql/test/query-tests/Security/CWE-347
dependencies
Pull requests that update a dependency file
documentation
Go
#22023
opened Jun 20, 2026 by
dependabot
Bot
Loading…
Bump golang.org/x/sys from 0.11.0 to 0.46.0 in /go/ql/test/query-tests/Security/CWE-347
dependencies
Pull requests that update a dependency file
documentation
Go
#22022
opened Jun 20, 2026 by
dependabot
Bot
Loading…
Bump golang.org/x/text from 0.8.0 to 0.38.0 in /go/ql/test/library-tests/semmle/go/frameworks/Fasthttp
dependencies
Pull requests that update a dependency file
documentation
Go
#22021
opened Jun 20, 2026 by
dependabot
Bot
Loading…
Bump golang.org/x/sys from 0.6.0 to 0.46.0 in /go/ql/test/library-tests/semmle/go/frameworks/Fasthttp
dependencies
Pull requests that update a dependency file
documentation
Go
#22020
opened Jun 20, 2026 by
dependabot
Bot
Loading…
Unified/swift: new AST spec and Swift mappings
documentation
no-change-note-required
This PR does not need a change note
#22016
opened Jun 19, 2026 by
asgerf
Contributor
Loading…
Update Apache Avro MaDs - Now including summaries
Java
#22015
opened Jun 19, 2026 by
BazookaMusic
Contributor
•
Draft
[WIP] Prompt injection detection for python
documentation
Python
#22008
opened Jun 18, 2026 by
BazookaMusic
Contributor
•
Draft
Go: more models for
log.slog
documentation
Go
#22006
opened Jun 18, 2026 by
owen-mc
Contributor
Loading…
Bump the pip group across 2 directories with 2 updates
dependencies
Pull requests that update a dependency file
Python
#22005
opened Jun 18, 2026 by
dependabot
Bot
Loading…
Java: model LDAP bind-DN sinks for java/ldap-injection
documentation
Java
#22002
opened Jun 18, 2026 by
tonghuaroot
Contributor
Loading…
Actions: Fix dominates() false positive in reusable workflows
Actions
Analysis of GitHub Actions
documentation
#21986
opened Jun 15, 2026 by
JarLob
Contributor
Loading…
Add experimental C# query: SSRF host guard missing IPv6-transition unwrap (CWE-918/CWE-1389)
C#
documentation
#21964
opened Jun 10, 2026 by
tonghuaroot
Contributor
Loading…
Previous Next
ProTip!
Exclude everything labeled
bug with -label:bug.