Skip to content

Pull requests: github/codeql

New pull request New
438 Open 16,889 Closed
438 Open 16,889 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Actions: Improve actions cache poisoning code injection wording Actions Analysis of GitHub Actions documentation
#22266 opened Jul 31, 2026 by JarLob Contributor Loading…
1
C#: Improve ASP.NET Core MVC controller discovery C# documentation
#22265 opened Jul 31, 2026 by JarLob Contributor Loading…
7
JS: Add support for file-scoped MaD models documentation JS
#22264 opened Jul 31, 2026 by asgerf Contributor • Draft
Actions: Add new models for external actions/workflows Actions Analysis of GitHub Actions documentation
#22263 opened Jul 31, 2026 by JarLob Contributor Loading…
4
Actions: Fix actions cache poisoning queries to account for the latest changes in cache write access Actions Analysis of GitHub Actions documentation
#22260 opened Jul 30, 2026 by JarLob Contributor Loading…
24
Ruby: Simplify ExprReturnNode to not rely on CFG no-change-note-required This PR does not need a change note Ruby
#22256 opened Jul 30, 2026 by aschackmull Contributor • Draft
2
build(deps): bump platforms from 1.0.0 to 1.1.0 bazel Pull requests that update bazel code dependencies Pull requests that update a dependency file
#22254 opened Jul 30, 2026 by dependabot Bot Loading…
unified: Always run corpus tests depends on internal PR This PR should only be merged in sync with an internal Semmle PR documentation no-change-note-required This PR does not need a change note
#22248 opened Jul 29, 2026 by tausbn Contributor Loading…
3
QL: Autoformat test files QL-for-QL
#22232 opened Jul 24, 2026 by redsun82 Contributor Loading…
8
Python: Reduce log injection false positives documentation Python
#22231 opened Jul 23, 2026 by Ali-Razmjoo Loading…
Support --learn for inline expectation tests C# C++ Go Java JS no-change-note-required This PR does not need a change note Python QL-for-QL Ruby Rust Pull requests that update Rust code Swift
#22228 opened Jul 23, 2026 by d10c Contributor Loading…
6
C++ regex parser: align with std::regex ECMAScript grammar and fix literal-location mapping
#22227 opened Jul 23, 2026 by Copilot AI • Draft
@jketema
Lua: Add Lua as a new CodeQL language documentation
#22223 opened Jul 22, 2026 by prankster009 Loading…
Actions: Normalize explicit untrusted checkout paths Actions Analysis of GitHub Actions documentation
#22221 opened Jul 21, 2026 by 1sgtpepper • Draft
1
6
Add C++ ECMAScript regular-expression parser and tree view
#22220 opened Jul 21, 2026 by Copilot AI • Draft
@jketema
Rust: Add a few more data flow test cases for format no-change-note-required This PR does not need a change note Rust Pull requests that update Rust code
#22216 opened Jul 21, 2026 by geoffw0 Contributor Loading…
1
Bump the npm_and_yarn group across 9 directories with 6 updates dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code JS
#22212 opened Jul 18, 2026 by dependabot Bot Loading…
Support multi-tag column surgery and tag-generic learning in --learn inline expectations C# C++ Go Java JS Python QL-for-QL Ruby Rust Pull requests that update Rust code Swift
#22208 opened Jul 16, 2026 by d10c Contributor • Draft
14
C#: Allow virtual member access in nameof expressions in cs/virtual-call-in-constructor. C# documentation
#22205 opened Jul 16, 2026 by michaelnebel Contributor Loading…
2
build(deps): bump buildifier_prebuilt from 6.4.0 to 8.5.1.3 bazel Pull requests that update bazel code dependencies Pull requests that update a dependency file
#22203 opened Jul 16, 2026 by dependabot Bot Loading…
build(deps): bump rules_cc from 0.2.17 to 0.2.22 bazel Pull requests that update bazel code dependencies Pull requests that update a dependency file
#22202 opened Jul 16, 2026 by dependabot Bot Loading…
Bump abseil-cpp from 20260107.1 to 20260526.0 bazel Pull requests that update bazel code dependencies Pull requests that update a dependency file
#22201 opened Jul 16, 2026 by dependabot Bot Loading…
C++ regex parse tree and RegexTreeViewSig implementation (Phase 1 of ReDoS support) C++ documentation
#22200 opened Jul 15, 2026 by Copilot AI • Draft
@jketema
19
C++: Add MaD summaries for shared_ptr, unique_ptr, and weak_ptr. C++
#22198 opened Jul 15, 2026 by MathiasVP Contributor • Draft
C#/Java: Modelgenerator. Lift models to unbound generic implementations. C# Java no-change-note-required This PR does not need a change note
#22192 opened Jul 15, 2026 by michaelnebel Contributor Loading…
2
ProTip! Filter pull requests by the default branch with base:main.