Skip to content

Pull requests: github/codeql

New pull request New
338 Open 12,008 Closed
338 Open 12,008 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Bump tree-sitter from 0.20.10 to 0.21.0 in /ql
dependencies Pull requests that update a dependency file QL-for-QL rust Pull requests that update Rust code
#15687 opened Feb 22, 2024 by dependabot bot Loading…
C++: Rewrite MemoryNeverFreed to use the DataFlow library
C++
#15685 opened Feb 21, 2024 by rdmarsh2 Loading…
4
C++: Fill some QLDoc holes
C++
#15684 opened Feb 21, 2024 by geoffw0 Loading…
4
Kotlin: Accept some Kotlin 2 location changes
Java
#15683 opened Feb 21, 2024 by igfoo Loading…
Bump Newtonsoft.Json from 6.0.4 to 13.0.1 in /csharp/ql/integration-tests/posix-only/standalone_dependencies_no_framework
C# dependencies Pull requests that update a dependency file .NET Pull requests that update .net code
#15677 opened Feb 21, 2024 by dependabot bot Loading…
Ruby: Consider additional arguments to certain ActiveRecord methods as sql injection sinks.
documentation Ruby
#15671 opened Feb 20, 2024 by joefarebrother Loading…
2
C#: Also add synthetic bodies and inititializers for default construc…
C#
#15667 opened Feb 20, 2024 by michaelnebel • Draft
C#: Adopt shared variable capture library
C# DataFlow Library
#15665 opened Feb 20, 2024 by hvitved • Draft
1
C++: Support destructors for range-based for-loops
C++ depends on internal PR This PR should only be merged in sync with an internal Semmle PR
#15662 opened Feb 20, 2024 by jketema Loading…
2
Swift: update prebuilt package
Swift
#15659 opened Feb 20, 2024 by redsun82 Loading…
C#: Use primary constructors for record types for dataflow.
C#
#15657 opened Feb 19, 2024 by michaelnebel • Draft
Ruby: Start building the language pack using bazel.
Ruby
#15656 opened Feb 19, 2024 by criemen Loading…
Python: Support model editor
Python
#15655 opened Feb 19, 2024 by yoff • Draft
1
Update CSV framework coverage reports
Go
#15648 opened Feb 17, 2024 by github-actions bot Loading…
2
Java: Add tests for Maven wrapper
Java
#15646 opened Feb 16, 2024 by smowton Loading…
C++: Assume modelled functions always override buffers by default
C++ documentation
#15633 opened Feb 16, 2024 by MathiasVP Loading…
19
C#: Remove Stored variants of queries
C# documentation
#15629 opened Feb 15, 2024 by egregius313 • Draft
4
Cpp non constant format as path query
C++ documentation
#15628 opened Feb 15, 2024 by bdrodes Loading…
3
Ruby: Add additional sql sinks for ActiveRecord connection methods
documentation Ruby
#15619 opened Feb 14, 2024 by joefarebrother Loading…
@hmac @alexrford
3
Golang: fix flow from a map value via a range statement
documentation Go
#15613 opened Feb 14, 2024 by smowton Loading…
3
C#: Add more environment and commandargs sources for the C# Standard Library
C#
#15605 opened Feb 13, 2024 by egregius313 • Draft
1
Ruby: add additional sources on the request object of Rails
documentation Ruby
#15604 opened Feb 13, 2024 by p- Loading…
1
Dataflow: wip test of fieldflowbranchlimit adjustment
C# C++ DataFlow Library Go Java Python Ruby Swift
#15599 opened Feb 13, 2024 by aschackmull • Draft
Bazel: use bzlmod
depends on internal PR This PR should only be merged in sync with an internal Semmle PR JS Swift
#15583 opened Feb 12, 2024 by redsun82 • Draft
13
JS: False negative - unsafe postMessage handler not detected
documentation external-contribution JS
#15571 opened Feb 9, 2024 by danilishinyar Loading…
@erik-krogh
2
ProTip! no:milestone will show everything without a milestone.