Pull requests

• fix(ci): keep JVM warnings out of codeql test JSON reports (stacked on #240)

  #242·felickz opened Oct 26, 2026Contributor·3/3·

  ·
  1

• fix(hotspots): avoid cartesian product in getImportStringFrom (stacked on #238)

  #240·felickz opened Oct 26, 2026Contributor·2/3·

  ·
  1

• chore: bump pinned CodeQL CLI to v2.27.3 and release v0.8.3

  codeql-cli-v2.27.3release-v0.8.3version
  #238·security-lab-bot[bot] opened Oct 21, 2026Bot·1/3·2 tasks·

  ·
  2

• Remove obsolete Java/Python local-source suites superseded by threat-models: local

  #218·felickz with CopilotAI opened Aug 10, 2026·

  ·
  1

  2

  

• Java: add experimental java/ldap-dn-injection-library-mode query (CWE-90)

  #149·tonghuaroot opened Jun 19, 2026·

  ·
  2

  

• C#: Add experimental SSRF IPv6-transition incomplete-guard query (CWE-918/CWE-1389)

  #148·tonghuaroot opened Jun 12, 2026·

  ·
  11

  

• Initial support for partial queries for js

  #140·felickz opened Sep 3, 2025Contributor·1 task·

  ·
  5

• feat(cpp): Add Insecure Functions query

  #134·GeekMasher opened Jun 23, 2025Contributor·

  ·
  3

• Add local sources to audit config

  enhancement
  #129·felickz opened May 6, 2025Contributor·

  ·
  3

• JS: query migration

  #116·GeekMasher opened Apr 15, 2025Contributor·

  ·

• Add sample synthetic suites

  #107·felickz opened Feb 21, 2025Contributor·

  ·
  2

• feat: Create Debugging Pack and add Queries

  #66·GeekMasher opened Jun 27, 2024Contributor·

  ·
  11