Skip to content

Pull requests: github/codeql

New pull request New
240 Open 8,034 Closed
240 Open 8,034 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Java: Add query to detect insufficient key size (globalflow keysize)
documentation Java
#10785 opened Oct 11, 2022 by jcogs33 • Draft
2
Ruby: model Pathname#existence extension from ActiveSupport
no-change-note-required This PR does not need a change note Ruby GA Ruby
#10784 opened Oct 11, 2022 by alexrford • Draft
2
Python: API graph improvements for subscripts
documentation Python
#10783 opened Oct 11, 2022 by yoff • Draft
Ruby: add library input as a source for rb/polynomial-redos
documentation Ruby
#10782 opened Oct 11, 2022 by erik-krogh • Draft
1
JS: Bump version numbers of ML-powered packs after 0.3.5 release
#10781 opened Oct 11, 2022 by codeql-ci Loading…
Swift: detect hardcoded encryption keys
documentation ready-for-doc-review This PR requires and is ready for review from the GitHub docs team. Swift
#10780 opened Oct 11, 2022 by karimhamdanali Loading…
7
C++: Add UninitializedNode to experimental IR dataflow
C++
#10779 opened Oct 11, 2022 by MathiasVP Loading…
Python: Add cx_Oracle, phoenixdb, pyodbc models
documentation Python
#10778 opened Oct 11, 2022 by sylwia-budzynska Loading…
C#: Generate data extension files
C#
#10777 opened Oct 11, 2022 by michaelnebel • Draft
Kotlin/Java: Exclude generated code from java/missing-override-annotation
Java Kotlin no-change-note-required This PR does not need a change note
#10776 opened Oct 11, 2022 by tamasvajk Loading…
Swift: Add summaries for tainted URL fields
Swift
#10774 opened Oct 11, 2022 by atorralba Loading…
Ruby: bugfix in type-tracking singleton class resolution
no-change-note-required This PR does not need a change note Ruby
#10773 opened Oct 11, 2022 by asgerf Loading…
C#: Include CIL SSA definitions in DataFlow::Node
C#
#10769 opened Oct 11, 2022 by hvitved • Draft
2
JS: fix that js/file-system-race could have FPs related to loops
JS no-change-note-required This PR does not need a change note
#10768 opened Oct 11, 2022 by erik-krogh Loading…
Kotlin: adjust extracted property reference base class
Kotlin
#10767 opened Oct 11, 2022 by tamasvajk Loading…
Consider other XSS unsafe content-types when reasoning about XSS vulnerabilities
JS no-change-note-required This PR does not need a change note
#10764 opened Oct 11, 2022 by pwntester Loading…
5
Java: Add query to detect insufficient key size (globalflow keygen)
documentation Java
#10762 opened Oct 11, 2022 by jcogs33 • Draft
3
Java: Add query to detect insufficient key size (globalflow both)
documentation Java
#10761 opened Oct 10, 2022 by jcogs33 • Draft
9
Ruby: Restrict regexp taint flow to String summaries
no-change-note-required This PR does not need a change note Ruby
#10760 opened Oct 10, 2022 by hvitved Loading…
3
kotlin: Populate numlines
Kotlin
#10759 opened Oct 10, 2022 by igfoo Loading…
1
Type tracking: Split up levelStep into levelStepCall and levelStepNoCall
no-change-note-required This PR does not need a change note Python Ruby
#10758 opened Oct 10, 2022 by hvitved Loading…
5
Swift: Query for SQL injection
documentation no-change-note-required This PR does not need a change note Swift
#10757 opened Oct 10, 2022 by geoffw0 • Draft
13
C#: Draft implementation of using extensible predicates for CSV rows.
C#
#10755 opened Oct 10, 2022 by michaelnebel • Draft
4
JS: Move mongodb model to a data-extension (experimental, do not merge)
JS WIP This is a work-in-progress, do not merge yet!
#10751 opened Oct 10, 2022 by asgerf • Draft
Ruby: treat Faraday#run_request as remote source
Ruby
#10749 opened Oct 10, 2022 by aibaars Loading…
ProTip! Find all pull requests that aren't related to any open issues with -linked:issue.