Skip to content

Pull requests: github/codeql

New pull request New
413 Open 16,680 Closed
413 Open 16,680 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Python: Support Flask subclasses documentation Python
#21869 opened May 19, 2026 by yoff Contributor • Draft
1
Bump jackson-core to 2.18.6 in ferstl-depgraph-dependencies (CVE-2025-52999) Java
#21868 opened May 19, 2026 by Copilot AI • Draft
@oscarsj
Ruby: Split callable and its body into two AST nodes. Ruby
#21867 opened May 19, 2026 by aschackmull Contributor • Draft
C#: Property- and Indexer calls for ref return properties and indexers. C# documentation
#21866 opened May 19, 2026 by michaelnebel Contributor • Draft
C#: Ensure that Folder entities exist for Compilation entities C#
#21865 opened May 19, 2026 by hvitved Contributor • Draft
Post-release preparation for codeql-cli-2.25.5 Actions Analysis of GitHub Actions C# C++ DataFlow Library documentation Go Java JS Python Ruby Rust Pull requests that update Rust code Swift
#21864 opened May 18, 2026 by codeql-ci Collaborator • Draft
@oscarsj
C++: Remove FunctionWithWrappers from cpp/tainted-format-string C++ depends on internal PR This PR should only be merged in sync with an internal Semmle PR
#21863 opened May 18, 2026 by MathiasVP Contributor • Draft
C++: Model secure versions of scanf as flow sources C++ documentation
#21856 opened May 15, 2026 by MathiasVP Contributor Loading…
3
C++: accept test results C++
#21855 opened May 15, 2026 by IdrissRio Contributor • Draft
Improve actions/ql/src/Security/CWE-829/UntrustedCheckoutX queries further iteration Actions Analysis of GitHub Actions documentation
#21852 opened May 14, 2026 by knewbury01 Contributor • Draft
2
Type inference: Unify getABaseTypeMention and conditionSatisfiesConstraint no-change-note-required This PR does not need a change note Rust Pull requests that update Rust code
#21850 opened May 13, 2026 by hvitved Contributor Loading…
5
Cfg: Add consistency queries for the Ast module. C# Java
#21849 opened May 13, 2026 by aschackmull Contributor • Draft
1
Unified: Add schema checking and corpus-style tests documentation no-change-note-required This PR does not need a change note
#21848 opened May 13, 2026 by asgerf Contributor Loading…
4
C#: Unary expression cleanup in the extractor. C#
#21845 opened May 13, 2026 by michaelnebel Contributor • Draft
Use relative paths in tree-sitter extractor diagnostics QL-for-QL Ruby
#21844 opened May 13, 2026 by redsun82 Contributor Loading…
1
9
Unified: Get rid of all $children fields
#21841 opened May 12, 2026 by tausbn Contributor • Draft
C#: Improve dataflow for mutation definition and mutation operator calls. C# documentation
#21839 opened May 12, 2026 by michaelnebel Contributor • Draft
Swift: prototype implementation of type inference in QL Rust Pull requests that update Rust code Swift
#21837 opened May 12, 2026 by hvitved Contributor • Draft
9
C++: Support reasoning about whether a phi node overwrites the entire buffer C++ no-change-note-required This PR does not need a change note
#21836 opened May 12, 2026 by MathiasVP Contributor Loading…
16
Adds support for multiple versions of external actions and workflows Actions Analysis of GitHub Actions
#21835 opened May 12, 2026 by jessehouwing Loading…
1
6
Add MaDs for Quarkus, Hibernate ORM with Panache Java
#21828 opened May 11, 2026 by jacknojo Contributor • Draft
1
C#: Include user defined operator calls in UnaryOperations. C#
#21820 opened May 8, 2026 by michaelnebel Contributor • Draft
CFG: Consider logical not a post order operation.
#21811 opened May 7, 2026 by michaelnebel Contributor • Draft
Update CWE-918 model coverage for Apache HttpClient execute sinks documentation Java
#21804 opened May 6, 2026 by Copilot AI Loading…
@owen-mc
5
Adjust alert location UntrustedCheckoutCritical Actions Analysis of GitHub Actions documentation
#21800 opened May 5, 2026 by knewbury01 Contributor Loading…
2
ProTip! Updated in the last three days: updated:>2026-05-16.