Skip to content

Pull requests: github/codeql

New pull request New
401 Open 16,597 Closed
401 Open 16,597 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Go: Only compute most recent side effect for relevant nodes Go
#21752 opened Apr 23, 2026 by hvitved Contributor • Draft
Move generated MaDs into modelgenerator/ Java no-change-note-required This PR does not need a change note
#21751 opened Apr 23, 2026 by jacknojo Loading…
2
Add Hibernate SQL injection sink models and coverage documentation Java
#21749 opened Apr 23, 2026 by Copilot AI Loading…
@owen-mc
6
Fix two QualifiedName join orders C++ no-change-note-required This PR does not need a change note
#21747 opened Apr 23, 2026 by jketema Contributor Loading…
1
Bump rules_cc from 0.2.17 to 0.2.18 bazel Pull requests that update bazel code dependencies Pull requests that update a dependency file
#21746 opened Apr 23, 2026 by dependabot Bot Loading…
Fix/path injection read subkind documentation Java
#21741 opened Apr 21, 2026 by MarkLee131 Contributor Loading…
5 tasks done
1
5
Go: improve accuracy of overlay annotations Go
#21740 opened Apr 21, 2026 by owen-mc Contributor • Draft
docs: Add 'Customizing library models for Rust' documentation documentation ready-for-doc-review This PR requires and is ready for review from the GitHub docs team.
#21727 opened Apr 17, 2026 by coadaflorin Contributor Loading…
33
Python: Add self-validating CFG tests no-change-note-required This PR does not need a change note Python
#21724 opened Apr 16, 2026 by tausbn Contributor • Draft
py/tarslip: detect shutil.unpack_archive and subprocess tar extraction Python
#21720 opened Apr 16, 2026 by Copilot AI • Draft
1
@hvitved
8
Bump rules_nodejs from 6.7.3 to 6.7.4 bazel Pull requests that update bazel code dependencies Pull requests that update a dependency file
#21717 opened Apr 16, 2026 by dependabot Bot Loading…
Bump rules_shell from 0.7.1 to 0.8.0 bazel Pull requests that update bazel code dependencies Pull requests that update a dependency file
#21716 opened Apr 16, 2026 by dependabot Bot Loading…
Improve actions/ql/src/Security/CWE-829/UntrustedCheckoutX queries Actions Analysis of GitHub Actions documentation
#21715 opened Apr 15, 2026 by knewbury01 Contributor Loading…
@knewbury01
10
Rust: Upgrade to rust-analyzer 0.328 Ruby Rust Pull requests that update Rust code
#21714 opened Apr 15, 2026 by tausbn Contributor • Draft
11
Bump the cargo group across 1 directory with 2 updates dependencies Pull requests that update a dependency file
#21705 opened Apr 14, 2026 by dependabot Bot Loading…
Bump pytest from 8.3.5 to 9.0.3 in /misc/codegen in the pip group across 1 directory dependencies Pull requests that update a dependency file
#21704 opened Apr 14, 2026 by dependabot Bot Loading…
Rust: Refine implSiblings no-change-note-required This PR does not need a change note Rust Pull requests that update Rust code
#21703 opened Apr 13, 2026 by hvitved Contributor Loading…
4
JS: Add support for @vercel/node serverless functions documentation JS
#21697 opened Apr 12, 2026 by murderteeth Loading…
12
Bump org.apache.logging.log4j:log4j-core from 2.14.1 to 2.25.4 in /java/ql/test/utils/flowtestcasegenerator in the maven group across 1 directory dependencies Pull requests that update a dependency file Java
#21696 opened Apr 10, 2026 by dependabot Bot Loading…
Add docs comment about deduplicating query rows documentation
#21693 opened Apr 10, 2026 by k4lizen Loading…
Extend actions/unpinned-tag to analyze composite action metadata (action.yml / action.yaml) Actions Analysis of GitHub Actions documentation
#21692 opened Apr 10, 2026 by Copilot AI Loading…
@oscarsj
6
Python: Port NonIteratorInForLoop.ql no-change-note-required This PR does not need a change note Python
#21688 opened Apr 9, 2026 by tausbn Contributor • Draft
Python: Port InconsistentMRO.ql no-change-note-required This PR does not need a change note Python
#21687 opened Apr 9, 2026 by tausbn Contributor • Draft
Python: Port HashedButNoHash.ql no-change-note-required This PR does not need a change note Python
#21686 opened Apr 9, 2026 by tausbn Contributor • Draft
1
C#: Improve BMN feed checking & handling. C# documentation
#21684 opened Apr 9, 2026 by michaelnebel Contributor Loading…
17
ProTip! no:milestone will show everything without a milestone.