Sitelet
https://github.com/github/codeql/commits/codeql-cli/v2.27.1/actions/ql/src
Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
10.2k
Code
Issues
1k
Pull requests
479
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
actions
ql
src
on
codeql-cli/v2.27.1
User selector
All users
Datepicker
All time
Commit history
Commits on Sep 17, 2026
Release preparation for version 2.27.1
github-actions[bot]
committed
903466f
View commit details
Copy full SHA for 903466f
View code at this point
Browse repository at this point
Commits on Sep 9, 2026
Code review suggestions
hvitved
authored and
nodeselector
committed
ff9bf5d
View commit details
Copy full SHA for ff9bf5d
View code at this point
Browse repository at this point
Actions lockfiles: ignore schema version value
nodeselector
committed
2b7e7ab
View commit details
Copy full SHA for 2b7e7ab
View code at this point
Browse repository at this point
Actions: consume extracted lockfile pins
nodeselector
committed
2e04003
View commit details
Copy full SHA for 2e04003
View code at this point
Browse repository at this point
actions/unpinned-tag: normalize lockfile action identity
nodeselector
committed
91faa26
View commit details
Copy full SHA for 91faa26
View code at this point
Browse repository at this point
actions: drop lockfile-extension generator from unpinned-tag PR
Show description for 77ac6d9
nodeselector
committed
77ac6d9
View commit details
Copy full SHA for 77ac6d9
View code at this point
Browse repository at this point
actions: use US spelling in lockfile-aware pinning comments
Show description for 2db34d2
nodeselector
committed
2db34d2
View commit details
Copy full SHA for 2db34d2
View code at this point
Browse repository at this point
actions/unpinned-tag: match lockfile pins case-insensitively on owner/repo
Show description for f8f8aa8
nodeselector
committed
f8f8aa8
View commit details
Copy full SHA for f8f8aa8
View code at this point
Browse repository at this point
actions: emit empty data list for zero-row lockfile extension
Show description for b6a8394
nodeselector
committed
b6a8394
View commit details
Copy full SHA for b6a8394
View code at this point
Browse repository at this point
actions: rename self-reference to self repository in unpinned-tag
Show description for feed864
nodeselector
committed
feed864
View commit details
Copy full SHA for feed864
View code at this point
Browse repository at this point
actions: drop machine-specific replace, document lockfile generator limits
Show description for 9e7133b
nodeselector
committed
9e7133b
View commit details
Copy full SHA for 9e7133b
View code at this point
Browse repository at this point
actions: scaffold lockfile-aware pinning for unpinned-tag
Show description for 180c109
nodeselector
committed
180c109
View commit details
Copy full SHA for 180c109
View code at this point
Browse repository at this point
actions: stop unpinned-tag flagging $/ self-references
Show description for 7fedff2
nodeselector
committed
7fedff2
View commit details
Copy full SHA for 7fedff2
View code at this point
Browse repository at this point
Commits on Sep 3, 2026
Post-release preparation for codeql-cli-2.27.0
github-actions[bot]
committed
cb62641
View commit details
Copy full SHA for cb62641
View code at this point
Browse repository at this point
Release preparation for version 2.27.0
github-actions[bot]
committed
da93726
View commit details
Copy full SHA for da93726
View code at this point
Browse repository at this point
Commits on Aug 21, 2026
Post-release preparation for codeql-cli-2.26.4
github-actions[bot]
committed
dbb6921
View commit details
Copy full SHA for dbb6921
View code at this point
Browse repository at this point
Commits on Aug 20, 2026
Release preparation for version 2.26.4
github-actions[bot]
committed
2bbab1b
View commit details
Copy full SHA for 2bbab1b
View code at this point
Browse repository at this point
Commits on Aug 12, 2026
Merge branch 'main' into fix-actions-unpinned-reusable-workflows
theinfosecguy
authored
ed82161
View commit details
Copy full SHA for ed82161
View code at this point
Browse repository at this point
Simplify composite action lookup
theinfosecguy
committed
710a753
View commit details
Copy full SHA for 710a753
View code at this point
Browse repository at this point
Commits on Aug 6, 2026
Post-release preparation for codeql-cli-2.26.3
github-actions[bot]
committed
47d6b11
View commit details
Copy full SHA for 47d6b11
View code at this point
Browse repository at this point
Release preparation for version 2.26.3
github-actions[bot]
committed
fae4a92
View commit details
Copy full SHA for fae4a92
View code at this point
Browse repository at this point
Commits on Aug 5, 2026
Detect unpinned reusable workflows
theinfosecguy
committed
d85deef
View commit details
Copy full SHA for d85deef
View code at this point
Browse repository at this point
Commits on Aug 4, 2026
Merge branch 'main' of https://github.com/github/codeql into fix/actions-cache-poisoning-cache-write-access
JarLob
committed
6a2d7be
View commit details
Copy full SHA for 6a2d7be
View code at this point
Browse repository at this point
Merge pull request #22274 from JarLob/remove/actions-self-hosted-runner-query
Show description for 2f2b4c8
aschackmull
authored
2f2b4c8
View commit details
Copy full SHA for 2f2b4c8
View code at this point
Browse repository at this point
Commits on Aug 3, 2026
Actions: Remove experimental self-hosted runner query
Show description for 7a7dae0
JarLob
committed
7a7dae0
View commit details
Copy full SHA for 7a7dae0
View code at this point
Browse repository at this point
Commits on Jul 31, 2026
Add change note
JarLob
committed
caf91c9
View commit details
Copy full SHA for caf91c9
View code at this point
Browse repository at this point
Reworded the misleading 'Unprivileged'
JarLob
committed
c40fe85
View commit details
Copy full SHA for c40fe85
View code at this point
Browse repository at this point
Merge github/main into fix/actions-cache-poisoning-cache-write-access
Show description for 827af90
JarLob
committed
827af90
View commit details
Copy full SHA for 827af90
View code at this point
Browse repository at this point
Merge remote-tracking branch 'github/main' into fix/actions-output-clobbering-regex
Show description for c9727af
JarLob
committed
c9727af
View commit details
Copy full SHA for c9727af
View code at this point
Browse repository at this point
Merge pull request #22243 from JarLob/improve/actions-untrusted-checkout-source-link
Show description for ddb7e3f
aschackmull
authored
ddb7e3f
View commit details
Copy full SHA for ddb7e3f
View code at this point
Browse repository at this point
Merge pull request #22235 from JarLob/fix/actions-envvar-injection-precision
Show description for 0fb9774
aschackmull
authored
0fb9774
View commit details
Copy full SHA for 0fb9774
View code at this point
Browse repository at this point
Merge branch 'main' into improve/actions-untrusted-checkout-source-link
JarLob
authored
a44c25c
View commit details
Copy full SHA for a44c25c
View code at this point
Browse repository at this point
Apply batched suggestions from code review
Show description for 9d147bc
JarLob
and
aschackmull
authored
9d147bc
View commit details
Copy full SHA for 9d147bc
View code at this point
Browse repository at this point
Delay envvar event-name correlation
JarLob
committed
de68881
View commit details
Copy full SHA for de68881
View code at this point
Browse repository at this point
Fix FP in envvar injection
JarLob
committed
26da3e7
View commit details
Copy full SHA for 26da3e7
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.
github-actions[bot]