Skip to content

Pull requests: github/codeql

New pull request New
428 Open 16,833 Closed
428 Open 16,833 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Avoid inconsistent implicit toString on potential string subtypes DataFlow Library no-change-note-required This PR does not need a change note
#21318 opened Feb 12, 2026 by ginsbach Contributor Loading…
2
Actions: Update reference link Actions Analysis of GitHub Actions documentation
#21295 opened Feb 8, 2026 by thatrobotdev Loading…
TEMP PR to run CI Rust Pull requests that update Rust code
#21289 opened Feb 6, 2026 by hvitved Contributor • Draft
3
Rust: WIP update rust_analyzer Ruby Rust Pull requests that update Rust code
#21284 opened Feb 6, 2026 by paldepind Contributor • Draft
3
C#: Make a more principled fix in ConstantCondition. C# no-change-note-required This PR does not need a change note
#21272 opened Feb 5, 2026 by aschackmull Contributor • Draft
python: fixes and additions for experimental key derivation function query library JS Python
#21231 opened Jan 28, 2026 by Lordfirespeed • Draft
Rust: Exclude self parameter accesses from rust/access-after-lifetime-ended documentation Rust Pull requests that update Rust code
#21155 opened Jan 12, 2026 by geoffw0 Contributor Loading…
3 tasks done
5
Shared: Improve range analysis for phis at loop exits C++ Java
#21135 opened Jan 9, 2026 by MathiasVP Contributor • Draft
JS: Only exclude JS files in the tsconfig outDir documentation JS
#21121 opened Jan 8, 2026 by asgerf Contributor • Draft
1
1
Rust: switch on TRAP compression Rust Pull requests that update Rust code
#21112 opened Jan 7, 2026 by redsun82 Contributor • Draft
4
GitHub: Add workflow_dispatch trigger to compile-queries.yml
#21108 opened Jan 6, 2026 by igfoo Contributor Loading…
1
Shared (static): Always treat subtypes column as true C# C++ Go Java
#21085 opened Jan 2, 2026 by owen-mc Contributor • Draft
1
[Draft] Java: Add remote flow sources for jakarta.websocket Java
#21041 opened Dec 15, 2025 by joefarebrother Contributor • Draft
1
C#: Add osx-arm64 as a possible RID. C#
#20998 opened Dec 9, 2025 by michaelnebel Contributor • Draft
JS: Allow isTypeUsed overrides to be global JS Python Ruby
#20980 opened Dec 8, 2025 by asgerf Contributor • Draft
Actions: Add new query actions/code-injection/low for code injection with step outputs Actions Analysis of GitHub Actions documentation
#20974 opened Dec 5, 2025 by owen-mc Contributor Loading…
3
JS: remove unreachable overloads query JS
#20968 opened Dec 5, 2025 by asgerf Contributor • Draft
JS: Fix bad join in export logic JS
#20952 opened Dec 2, 2025 by asgerf Contributor • Draft
Actions: improve improper access control query Actions Analysis of GitHub Actions documentation
#20904 opened Nov 25, 2025 by redsun82 Contributor Loading…
1
5
Rust: Jump-to-def for operations and indexing no-change-note-required This PR does not need a change note Rust Pull requests that update Rust code
#20900 opened Nov 24, 2025 by hvitved Contributor Loading…
18
Shared: Make UniversalFlow overlay-aware. C++ Java
#20884 opened Nov 21, 2025 by aschackmull Contributor • Draft
Rust: Improve models for conversions documentation Rust Pull requests that update Rust code
#20875 opened Nov 19, 2025 by geoffw0 Contributor • Draft
1 of 4 tasks
Java: Add support for data flow through thrown exceptions. Java
#20867 opened Nov 19, 2025 by aschackmull Contributor • Draft
3
Java: Propagate taint through field reads Java
#20865 opened Nov 18, 2025 by owen-mc Contributor • Draft
1
C#: Make NuGet feed reachability more conservative, C#
#20836 opened Nov 14, 2025 by michaelnebel Contributor • Draft
ProTip! Exclude everything labeled bug with -label:bug.