Skip to content

Pull requests: github/codeql

New pull request New
398 Open 16,637 Closed
398 Open 16,637 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Shared: Improvements to SensitiveDataHeuristics.qll javascript Pull requests that update Javascript code Rust Pull requests that update Rust code Swift
#21806 opened May 6, 2026 by geoffw0 Contributor • Draft
7 tasks
Update CWE-918 model coverage for Apache HttpClient execute sinks Java
#21804 opened May 6, 2026 by Copilot AI • Draft
@owen-mc
2
Expand SSRF sink models for org.apache.http.client.HttpClient Java
#21803 opened May 6, 2026 by owen-mc Contributor • Draft
1
Adjust alert location UntrustedCheckoutCritical Actions Analysis of GitHub Actions documentation
#21800 opened May 5, 2026 by knewbury01 Contributor Loading…
2
Shared: Add YEAST desugaring library documentation no-change-note-required This PR does not need a change note QL-for-QL Ruby
#21797 opened May 5, 2026 by tausbn Contributor Loading…
22
Add UseMemoDirective and UseNoMemoDirective classes documentation JS
#21796 opened May 5, 2026 by mattcosta7 Member Loading…
1
Rust: Move more type inference logic into shared library Rust Pull requests that update Rust code Swift
#21795 opened May 5, 2026 by hvitved Contributor • Draft
5
Post-release preparation for codeql-cli-2.25.4 Actions Analysis of GitHub Actions C# C++ DataFlow Library documentation Go Java JS Python Ruby Rust Pull requests that update Rust code Swift
#21794 opened May 5, 2026 by codeql-ci Collaborator Loading…
@redsun82
5
Enable local threat-model by default
#21792 opened May 5, 2026 by jacknojo Contributor • Draft
C# 14: Support for user-defined increment and decrement operators. C#
#21791 opened May 5, 2026 by michaelnebel Contributor • Draft
Go: add experimental query for IDNA digit-fold IP-literal smuggling documentation Go
#21784 opened May 4, 2026 by astrogilda Loading…
17
Go: In overlay mode, discard struct types and their fields Go
#21779 opened Apr 30, 2026 by owen-mc Contributor • Draft
Add MaDs for Jakarta REST library Java
#21776 opened Apr 29, 2026 by jacknojo Contributor • Draft
1
Add MaDs for Apache Avro Java
#21754 opened Apr 24, 2026 by jacknojo Contributor • Draft
10
Bump rules_cc from 0.2.17 to 0.2.18 bazel Pull requests that update bazel code dependencies Pull requests that update a dependency file
#21746 opened Apr 23, 2026 by dependabot Bot Loading…
Fix/path injection read subkind documentation Java
#21741 opened Apr 21, 2026 by MarkLee131 Contributor Loading…
5 tasks done
1
20
docs: Add 'Customizing library models for Rust' documentation documentation ready-for-doc-review This PR requires and is ready for review from the GitHub docs team.
#21727 opened Apr 17, 2026 by coadaflorin Contributor Loading…
53
Python: Add self-validating CFG tests no-change-note-required This PR does not need a change note Python
#21724 opened Apr 16, 2026 by tausbn Contributor • Draft
12
py/tarslip: detect shutil.unpack_archive and subprocess tar extraction Python
#21720 opened Apr 16, 2026 by Copilot AI • Draft
1
@hvitved
8
Bump rules_nodejs from 6.7.3 to 6.7.4 bazel Pull requests that update bazel code dependencies Pull requests that update a dependency file
#21717 opened Apr 16, 2026 by dependabot Bot Loading…
Bump rules_shell from 0.7.1 to 0.8.0 bazel Pull requests that update bazel code dependencies Pull requests that update a dependency file
#21716 opened Apr 16, 2026 by dependabot Bot Loading…
Rust: Upgrade to rust-analyzer 0.328 Ruby Rust Pull requests that update Rust code
#21714 opened Apr 15, 2026 by tausbn Contributor • Draft
11
Bump the cargo group across 1 directory with 2 updates dependencies Pull requests that update a dependency file
#21705 opened Apr 14, 2026 by dependabot Bot Loading…
Bump pytest from 8.3.5 to 9.0.3 in /misc/codegen in the pip group across 1 directory dependencies Pull requests that update a dependency file
#21704 opened Apr 14, 2026 by dependabot Bot Loading…
Bump org.apache.logging.log4j:log4j-core from 2.14.1 to 2.25.4 in /java/ql/test/utils/flowtestcasegenerator in the maven group across 1 directory dependencies Pull requests that update a dependency file Java
#21696 opened Apr 10, 2026 by dependabot Bot Loading…
ProTip! Follow long discussions with comments:>50.