Repository navigation

All pull requests

Labels (10)Milestones (0)New pull request

Open

(28)

Closed

(351)

Fix missing XML validation false positives
#410Chanel (chanel-y) opened Nov 10, 2026
Pin GitHub Actions to full-length commit SHAs
#407Dan Fiedler (danfiedler-msft) opened Oct 7, 2026
Test changed-query workflow
#406Chanel (chanel-y) opened Sep 29, 2026
Actions: Fix FP cases for critical TOCTOU precision
#404Chanel (chanel-y) opened Sep 28, 2026
Actions: Fix FP case for if-expression-always-true/high
#403Chanel (chanel-y) opened Sep 28, 2026
X++: add extractor and QL library generated from the compiler's own AST
#392Giulia Stocco (gfs) opened Aug 17, 2026Collaborator
1
Mrva powershell pack split
#389Chanel (chanel-y) opened Aug 10, 2026
1
PS: Add import clixml sink to unsafe deserialization query
#377Chanel (chanel-y) opened Jul 22, 2026
rust: Add config-derived host barrier for XSS
#375Chanel (chanel-y) opened Jul 20, 2026
rust: Add config-derived table name barrier for SQL injection
#374Chanel (chanel-y) opened Jul 20, 2026
Powershell Pack Rename
#369dilanbhalla opened Jun 17, 2026Collaborator
1
js/sql-injection: detect mssql query/batch called as standalone functions after destructuring
#340chanel-y with CopilotAI opened Mar 25, 2026
Revert "fix powershell extractor on Linux"
#336Mathias Vorreiter Pedersen (MathiasVP) opened Mar 18, 2026Collaborator
Removing high FP case in IncorrectUsageOfRtlCompareMemory, altering t…
#328Ben Rodes (bdrodes) opened Feb 12, 2026
Azure python ssrf sanitizers
#325Ben Rodes (bdrodes) opened Feb 2, 2026
Azure python sdk url summary local
#324Ben Rodes (bdrodes) opened Feb 2, 2026
Highly experimental false positive reduction tweaks
#314Ben Rodes (bdrodes) opened Dec 18, 2025
Azure SDK models for SSRF analysis.
#289Ben Rodes (bdrodes) opened Sep 26, 2025
C++: Add 'asParameter' on Definition.
#280Mathias Vorreiter Pedersen (MathiasVP) opened Sep 8, 2025Collaborator
PS: Workflow to build the PS extractor
#274Mathias Vorreiter Pedersen (MathiasVP) opened Aug 21, 2025Collaborator
csharp ssrf
#236Lindsay Simpkins (LWSimpkins) opened May 23, 2025Collaborator
3
DO NOT MERGE: Perform alias analysis in C/C++ dataflow
#177Mathias Vorreiter Pedersen (MathiasVP) opened Mar 12, 2025Collaborator
PS: Fix spelling error
#150Mathias Vorreiter Pedersen (MathiasVP) opened Dec 6, 2024Collaborator
Failed Extraction Queries Resubmit
#148dilanbhalla opened Dec 3, 2024Collaborator
C#: Update MainMethod to understand new Main method syntaxes
#65Levi Broderick (GrabYourPitchforks) opened May 9, 2024Member

Navigation Menu

Repository navigation

All pull requests

Fix missing XML validation false positives

Pin GitHub Actions to full-length commit SHAs

Test changed-query workflow

Actions: Fix FP cases for critical TOCTOU precision

Actions: Fix FP case for if-expression-always-true/high

X++: add extractor and QL library generated from the compiler's own AST

Mrva powershell pack split

PS: Add import clixml sink to unsafe deserialization query

rust: Add config-derived host barrier for XSS

rust: Add config-derived table name barrier for SQL injection

Powershell Pack Rename

js/sql-injection: detect mssql `query`/`batch` called as standalone functions after destructuring

Revert "fix powershell extractor on Linux"

Removing high FP case in IncorrectUsageOfRtlCompareMemory, altering t…

Azure python ssrf sanitizers

Azure python sdk url summary local

Highly experimental false positive reduction tweaks

Azure SDK models for SSRF analysis.

C++: Add 'asParameter' on Definition.

PS: Workflow to build the PS extractor

csharp ssrf

DO NOT MERGE: Perform alias analysis in C/C++ dataflow

PS: Fix spelling error

Failed Extraction Queries Resubmit

C#: Update MainMethod to understand new Main method syntaxes

Pull requests