Pull requests · github/codeql · GitHub
Skip to content

Pull requests: github/codeql

New pull request New
419 Open 16,857 Closed
419 Open 16,857 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Add Windows integration tests showing that subst is handled inconsistently C# Go Java JS Python Ruby Rust Pull requests that update Rust code
#22087 opened Jun 29, 2026 by jketema Contributor • Draft
Unified: Split up corpus tests and their generated outputs documentation
#22086 opened Jun 29, 2026 by asgerf Contributor Loading…
4
Unified: add default_queries and standard qls files no-change-note-required This PR does not need a change note
#22083 opened Jun 29, 2026 by asgerf Contributor Loading…
5
Shared: Generate final tree-sitter classes no-change-note-required This PR does not need a change note QL-for-QL Ruby
#22082 opened Jun 29, 2026 by hvitved Contributor Loading…
3
Ruby: Address testFailures in inline expectations tests (part 2) no-change-note-required This PR does not need a change note Ruby
#22081 opened Jun 29, 2026 by geoffw0 Contributor Loading…
7
Kotlin: Address inline expectations testFailures. Java Kotlin no-change-note-required This PR does not need a change note
#22079 opened Jun 29, 2026 by geoffw0 Contributor Loading…
1
Java: Address testFailures in inline expectations tests Java no-change-note-required This PR does not need a change note
#22077 opened Jun 29, 2026 by geoffw0 Contributor Loading…
3
Kotlin extractor: fix K2 regressions without expected churn Java Kotlin
#22076 opened Jun 29, 2026 by andersfugmann Contributor • Draft
Java: accept new tests results Java
#22075 opened Jun 29, 2026 by IdrissRio Contributor • Draft
Shared: Support flow summaries from ReturnValues C# C++ DataFlow Library Go Java JS no-change-note-required This PR does not need a change note Python Ruby Rust Pull requests that update Rust code Swift
#22061 opened Jun 25, 2026 by MathiasVP Contributor Loading…
4
Rust: Fix FPs in rust/hard-coded-cryptographic-value documentation Rust Pull requests that update Rust code
#22053 opened Jun 25, 2026 by geoffw0 Contributor Loading…
9
Type inference: Generalize typeConstraintBaseTypeMatch no-change-note-required This PR does not need a change note Rust Pull requests that update Rust code
#22052 opened Jun 25, 2026 by hvitved Contributor Loading…
6
Go: Update to 1.27 depends on internal PR This PR should only be merged in sync with an internal Semmle PR documentation Go
#22042 opened Jun 24, 2026 by jketema Contributor • Draft
C#: Improve package download logic. C# documentation
#22041 opened Jun 24, 2026 by michaelnebel Contributor • Draft
4
Add repr() and %r sanitizers to py/log-injection query to reduce false positives Python
#22038 opened Jun 23, 2026 by mrigankpawagi Contributor Loading…
1
Add java data extensions various documentation Java
#22034 opened Jun 22, 2026 by knewbury01 Contributor Loading…
3
C#: Use the feed manager in the NugetExeWrapper. C# documentation
#22033 opened Jun 22, 2026 by michaelnebel Contributor Loading…
12
Python: fix py/insecure-protocol false positive on ssl.create_default_context() documentation Python
#22028 opened Jun 21, 2026 by parkerbxyz Member • Draft
1
Add CWE-295 query for C# (accepting any TLS certificate) C# documentation
#22019 opened Jun 19, 2026 by Copilot AI • Draft
@owen-mc
Update Apache Avro MaDs - Now including summaries Java
#22015 opened Jun 19, 2026 by BazookaMusic Contributor • Draft
1
[WIP] Prompt injection detection for python documentation Python
#22008 opened Jun 18, 2026 by BazookaMusic Contributor • Draft
2
Go: more models for log.slog documentation Go
#22006 opened Jun 18, 2026 by owen-mc Contributor Loading…
4
Bump the pip group across 2 directories with 2 updates dependencies Pull requests that update a dependency file Python
#22005 opened Jun 18, 2026 by dependabot Bot Loading…
1
Java: model LDAP bind-DN sinks for java/ldap-injection documentation Java
#22002 opened Jun 18, 2026 by tonghuaroot Contributor Loading…
Add experimental C# query: SSRF host guard missing IPv6-transition unwrap (CWE-918/CWE-1389) C# documentation
#21964 opened Jun 10, 2026 by tonghuaroot Contributor Loading…
3
ProTip! Add no:assignee to see everything that’s not assigned.