Skip to content

Pull requests: github/codeql

New pull request New
423 Open 16,751 Closed
423 Open 16,751 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

C++: Fix NameQualifyingElement db inconsistency C++ no-change-note-required This PR does not need a change note
#21968 opened Jun 10, 2026 by jketema Contributor Loading…
1
Convert non-Go/Java qlref tests to inline expectation tests via postprocess Actions Analysis of GitHub Actions C# C++ JS Python Ruby Rust Pull requests that update Rust code Swift
#21967 opened Jun 10, 2026 by Copilot AI • Draft
@owen-mc
2
Java: convert all qlref tests to inline expectation tests using postprocessing Java no-change-note-required This PR does not need a change note
#21966 opened Jun 10, 2026 by owen-mc Contributor Loading…
4
Go: convert all qlref tests to inline expectation tests using postprocessing Go no-change-note-required This PR does not need a change note
#21965 opened Jun 10, 2026 by owen-mc Contributor Loading…
19
Add experimental C# query: SSRF host guard missing IPv6-transition unwrap (CWE-918/CWE-1389) C# documentation
#21964 opened Jun 10, 2026 by tonghuaroot Contributor Loading…
Unified: More work on AST and Swift mappings no-change-note-required This PR does not need a change note
#21962 opened Jun 9, 2026 by asgerf Contributor • Draft
1
Go: fix DataFlow::ResultNode and some related things documentation Go
#21957 opened Jun 8, 2026 by owen-mc Contributor Loading…
4
Cfg: Fold getTryInit into indexed getBody. C# Java no-change-note-required This PR does not need a change note
#21955 opened Jun 8, 2026 by aschackmull Contributor Loading…
4
[Javascript] Prompt Injection queries documentation javascript Pull requests that update Javascript code JS Python
#21953 opened Jun 8, 2026 by BazookaMusic Contributor • Draft
10
Kotlin: Add support for Kotlin 2.4.0 documentation Java Kotlin
#21952 opened Jun 8, 2026 by andersfugmann Contributor • Draft
3
Python: visit function parameter and return annotations in new CFG documentation Python
#21943 opened Jun 4, 2026 by yoff Contributor • Draft
Go: Improve precision of go/unhandled-writable-file-close documentation Go
#21940 opened Jun 4, 2026 by owen-mc Contributor Loading…
5
C/C++ overlay: avoid massive cartesian product in overlay discardElement C++
#21939 opened Jun 4, 2026 by IdrissRio Contributor • Draft
Python: model exception edges for raise-prone expressions inside try/with Python
#21937 opened Jun 4, 2026 by yoff Contributor • Draft
YAML: Extract comments Actions Analysis of GitHub Actions depends on internal PR This PR should only be merged in sync with an internal Semmle PR javascript Pull requests that update Javascript code JS no-change-note-required This PR does not need a change note Python QL-for-QL Ruby Rust Pull requests that update Rust code
#21935 opened Jun 3, 2026 by MathiasVP Contributor Loading…
2
Shared CFG: add defaulted getWhileElse/getForeachElse to AstSig
#21931 opened Jun 2, 2026 by yoff Contributor Loading…
10
Python: inline init_module_submodule_defn into ImportResolution documentation Python
#21930 opened Jun 2, 2026 by yoff Contributor Loading…
5
Python: switch dataflow library to new (shared) CFG + SSA documentation Python
#21925 opened Jun 1, 2026 by yoff Contributor • Draft
11
Python: add new shared-SSA-backed SSA adapter (additive) documentation Python
#21923 opened Jun 1, 2026 by yoff Contributor • Draft
4
Python: add new shared-CFG-backed control flow graph (additive) documentation Go Python Ruby Rust Pull requests that update Rust code
#21921 opened Jun 1, 2026 by yoff Contributor • Draft
3
Python: qualify Flow.qll's AST references with Py:: prefix no-change-note-required This PR does not need a change note Python
#21920 opened Jun 1, 2026 by yoff Contributor Loading…
4
Python: deprecate AstNode.getAFlowNode() and rewrite callers documentation Python
#21919 opened Jun 1, 2026 by yoff Contributor Loading…
6
Kotlin: Fix findTopLevelPropertyOrWarn for K2 compiler documentation Java Kotlin
#21915 opened May 30, 2026 by david-allison Loading…
1
C#: Refactor- and rename operation expressions. C#
#21909 opened May 29, 2026 by michaelnebel Contributor • Draft
1
C++: Proper indirection in all QL models C++ no-change-note-required This PR does not need a change note
#21908 opened May 29, 2026 by MathiasVP Contributor • Draft
ProTip! Follow long discussions with comments:>50.
⚡