Skip to content

Pull requests: github/codeql

New pull request New
421 Open 16,834 Closed
421 Open 16,834 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Shared: Support flow summaries from ReturnValues C# C++ DataFlow Library Go Java JS Python Ruby Rust Pull requests that update Rust code Swift
#22061 opened Jun 25, 2026 by MathiasVP Contributor • Draft
1
Post-release preparation for codeql-cli-2.26.0 Actions Analysis of GitHub Actions C# C++ DataFlow Library documentation Go Java JS Python Ruby Rust Pull requests that update Rust code Swift
#22060 opened Jun 25, 2026 by codeql-ci Collaborator • Draft
@mbg
yeast: Add support for a user-managed context during rule rewrites documentation
#22054 opened Jun 25, 2026 by tausbn Contributor Loading…
10
Rust: Fix FPs in rust/hard-coded-cryptographic-value documentation Rust Pull requests that update Rust code
#22053 opened Jun 25, 2026 by geoffw0 Contributor Loading…
7
Shared: Generalize typeConstraintBaseTypeMatch Rust Pull requests that update Rust code
#22052 opened Jun 25, 2026 by hvitved Contributor • Draft
Go CFG: remove dead "send" additional node
#22050 opened Jun 25, 2026 by Copilot AI • Draft
@owen-mc
Go: Update to 1.27 depends on internal PR This PR should only be merged in sync with an internal Semmle PR documentation Go
#22042 opened Jun 24, 2026 by jketema Contributor • Draft
C#: Improve package download logic. C# documentation
#22041 opened Jun 24, 2026 by michaelnebel Contributor • Draft
4
Add repr() and %r sanitizers to py/log-injection query to reduce false positives Python
#22038 opened Jun 23, 2026 by mrigankpawagi Contributor Loading…
1
JavaScript: Recognize Angular @HostListener('window:message') as a postMessage handler documentation JS
#22036 opened Jun 23, 2026 by felickz Contributor Loading…
6
Add java data extensions various documentation Java
#22034 opened Jun 22, 2026 by knewbury01 Contributor Loading…
3
C#: Use the feed manager in the NugetExeWrapper. C# documentation
#22033 opened Jun 22, 2026 by michaelnebel Contributor Loading…
11
Python: fix py/insecure-protocol false positive on ssl.create_default_context() documentation Python
#22028 opened Jun 21, 2026 by parkerbxyz Member • Draft
1
Bump golang.org/x/text from 0.12.0 to 0.38.0 in /go/ql/test/query-tests/Security/CWE-347 dependencies Pull requests that update a dependency file documentation Go
#22024 opened Jun 20, 2026 by dependabot Bot Loading…
Bump github.com/gin-gonic/gin from 1.9.1 to 1.12.0 in /go/ql/test/query-tests/Security/CWE-347 dependencies Pull requests that update a dependency file documentation Go
#22023 opened Jun 20, 2026 by dependabot Bot Loading…
Bump golang.org/x/sys from 0.11.0 to 0.46.0 in /go/ql/test/query-tests/Security/CWE-347 dependencies Pull requests that update a dependency file documentation Go
#22022 opened Jun 20, 2026 by dependabot Bot Loading…
Bump golang.org/x/text from 0.8.0 to 0.38.0 in /go/ql/test/library-tests/semmle/go/frameworks/Fasthttp dependencies Pull requests that update a dependency file documentation Go
#22021 opened Jun 20, 2026 by dependabot Bot Loading…
Bump golang.org/x/sys from 0.6.0 to 0.46.0 in /go/ql/test/library-tests/semmle/go/frameworks/Fasthttp dependencies Pull requests that update a dependency file documentation Go
#22020 opened Jun 20, 2026 by dependabot Bot Loading…
Add CWE-295 query for C# (accepting any TLS certificate) C# documentation
#22019 opened Jun 19, 2026 by Copilot AI • Draft
@owen-mc
Update Apache Avro MaDs - Now including summaries Java
#22015 opened Jun 19, 2026 by BazookaMusic Contributor • Draft
1
[WIP] Prompt injection detection for python documentation Python
#22008 opened Jun 18, 2026 by BazookaMusic Contributor • Draft
2
Go: more models for log.slog documentation Go
#22006 opened Jun 18, 2026 by owen-mc Contributor Loading…
3
Bump the pip group across 2 directories with 2 updates dependencies Pull requests that update a dependency file Python
#22005 opened Jun 18, 2026 by dependabot Bot Loading…
1
Java: model LDAP bind-DN sinks for java/ldap-injection documentation Java
#22002 opened Jun 18, 2026 by tonghuaroot Contributor Loading…
Add experimental C# query: SSRF host guard missing IPv6-transition unwrap (CWE-918/CWE-1389) C# documentation
#21964 opened Jun 10, 2026 by tonghuaroot Contributor Loading…
3
ProTip! Filter pull requests by the default branch with base:main.