Skip to content

Pull requests: github/codeql

New pull request New
Clear current search query, filters, and sorts
428 Open 16,843 Closed
428 Open 16,843 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Added vim syntax highlighting for dbschemes
#1461 opened Jun 14, 2019 by Viddog Loading…
7
CS: Adding DecryptWithoutHash and CertificateValidationDisabled queries
#1622 opened Jul 22, 2019 by denislevin Contributor Loading…
1
C++: Improve alias analysis for indirections C++
#1736 opened Aug 14, 2019 by dave-bartolomeo Contributor • Draft
8
[CPP-435] Calls to memset and ZeroMemory may be deleted by the compiler C++
#1933 opened Sep 13, 2019 by zlaski-semmle Contributor • Draft
41
QL training: C++ variant analysis slide deck
#1966 opened Sep 19, 2019 by lcartey Contributor • Draft
2
Insecure MemSet C++
#2207 opened Oct 25, 2019 by dave-bartolomeo Contributor • Draft
5
C++/C#: Remove Instruction::getResultType() and friends C# C++
#2217 opened Oct 28, 2019 by dave-bartolomeo Contributor Loading…
@dbartol
9
Java: QL Query to Detect Security Sensitive non-CSPRNG usage Java
#2694 opened Jan 24, 2020 by JLLeitschuh Contributor Loading…
24
C++: Use TaintTracking::Configuration in TaintedAllocationSize C++ depends on internal PR This PR should only be merged in sync with an internal Semmle PR
#3519 opened May 19, 2020 by rdmarsh2 Contributor Loading…
12
JS: add new query: js/unclosed-stream Awaiting evaluation Do not merge yet, this PR is waiting for an evaluation to finish documentation JS
#3682 opened Jun 11, 2020 by esbena Contributor • Draft
2 of 3 tasks
11
Java: Arbitrary user-controlled read/write on user-controlled path Java
#3794 opened Jun 24, 2020 by intrigus-lgtm Contributor • Draft
16
Python: BufferedRWPair Undefined Behavior
#3884 opened Jul 3, 2020 by dilanbhalla Contributor Loading…
10
Python: Private Data Cleartext Storage/Logging
#3899 opened Jul 4, 2020 by dilanbhalla Contributor Loading…
4
Python: XML RPC Dotted Names
#3910 opened Jul 6, 2020 by dilanbhalla Contributor Loading…
2
Java: Extract module HardcodedCredentials from CWE-798
#3992 opened Jul 30, 2020 by rvermeulen Contributor • Draft
10
Test: Simple change to Java folder documentation Java WIP This is a work-in-progress, do not merge yet!
#4248 opened Sep 10, 2020 by adityasharad Collaborator • Draft
4
C#: Adds check for Server Side Template Injection vulnerabilities in RazorEngine C#
#4313 opened Sep 22, 2020 by cldrn Contributor Loading…
@hvitved
16
Java: CWE-378: Temp Directory Hijacking Race Condition Vulnerability documentation Java
#4473 opened Oct 14, 2020 by JLLeitschuh Contributor Loading…
@smowton
84
Add GitHub action to automatically add EOL @ EOF
#4485 opened Oct 15, 2020 by JLLeitschuh Contributor Loading…
13
Java: Unbounded Allocation queries documentation Java
#4582 opened Oct 30, 2020 by joefarebrother Contributor Loading…
32
JS: sanitize taint in the LHS of && JS
#4681 opened Nov 17, 2020 by esbena Contributor • Draft
Java: Add flow steps through methods of java.nio.Buffer and its subclasses Java
#4743 opened Nov 27, 2020 by joefarebrother Contributor Loading…
5
Docs: add an example .qls with a tag regex documentation
#4793 opened Dec 7, 2020 by rdmarsh2 Contributor Loading…
2
C#: Support suppression comments in XML files C# C++ Java JS Python
#4948 opened Jan 12, 2021 by rdmarsh2 Contributor • Draft
10
JS: update externs from closure-compiler Awaiting evaluation Do not merge yet, this PR is waiting for an evaluation to finish JS WIP This is a work-in-progress, do not merge yet!
#4955 opened Jan 13, 2021 by erik-krogh Contributor • Draft
2 tasks
ProTip! no:milestone will show everything without a milestone.