github / codeql Public

16 Pull requests merged by 10 people

• C#: Fix bad join-order in dispatch library

  #7470 merged Dec 22, 2021

• Ruby: add CryptoAlgorithms library

  #7273 merged Dec 22, 2021

• [Ruby] Bugfix: ConstantWriteAccess::getQualifiedName() returns wrong value in some cases

  #7446 merged Dec 22, 2021

• Ruby: Data flow for keyword arguments/parameters

  #7442 merged Dec 22, 2021

• Update CSV framework coverage reports

  #7466 merged Dec 22, 2021

• Ruby: query to find user-controlled bypass of sensitive actions

  #7305 merged Dec 21, 2021

• Ruby: CFG: make all expressions "post-order" nodes

  #7394 merged Dec 21, 2021

• C#: Flow summaries in CSV format.

  #7424 merged Dec 21, 2021

• C++: Fix join order in `isArgumentForParameter`

  #7392 merged Dec 21, 2021

• Ruby: Include StringComponents in the CFG

  #7440 merged Dec 21, 2021

• Ruby: Reduce non-linear recursion in CFG completion library

  #7460 merged Dec 20, 2021

• C++: Improvements to cpp/cleartext-transmission

  #7338 merged Dec 20, 2021

• QL4QL: catch behaviour/behavior in ql/non-us-spelling

  #7443 merged Dec 20, 2021

• QL-for-QL: Followup changes

  #7441 merged Dec 20, 2021

• Ruby: Model what is written to the log from stdlib `Logger` methods

  #7399 merged Dec 20, 2021

• C#: Enable data-flow consistency queries

  #7231 merged Dec 20, 2021

12 Pull requests opened by 9 people

• Python: Add shutil module sinks for path injection query

  #7455 opened Dec 20, 2021

• C#: Shared extraction

  #7456 opened Dec 20, 2021

• Ruby: improve handling of LGTM_INDEX_FILTER

  #7457 opened Dec 20, 2021

• QL: add "modelling/modeling" to `ql/non-us-spelling`

  #7458 opened Dec 20, 2021

• C++: Increase precision of `cpp/arithmetic-uncontrolled` to `high`

  #7459 opened Dec 20, 2021

• C#: Introduce flow summaries for StringValues.

  #7465 opened Dec 21, 2021

• C#: Re-factor the ForEachCapture query to use MaD flow summaries.

  #7468 opened Dec 22, 2021

• C#: Promote existing ad-hoc consistency checks to consistency queries

  #7469 opened Dec 22, 2021

• Adding a codeql script to find PendingIntent Vulnerbilies to new_branch

  #7471 opened Dec 22, 2021

• QL-for-QL: Add a redundant aggregate query

  #7472 opened Dec 22, 2021

• [draft] DB reads as taint sources

  #7474 opened Dec 22, 2021

• JS: Improve performance of ATM queries on large databases

  #7475 opened Dec 22, 2021

4 Issues closed by 4 people

• LGTM.com - false positive - The value assigned to local variable 'xsrf_token' is never used.

  #7478 closed Dec 26, 2021

• SinkModelCsv

  #7476 closed Dec 23, 2021

• Java: Potentially duplicated results and paths from a custom data flow query

  #7449 closed Dec 23, 2021

• how parse lib/*.jar to java database

  #7462 closed Dec 21, 2021

5 Issues opened by 4 people

• Infinite loop when executing DataFlow queries

  #7481 opened Dec 26, 2021

• LGTM.com - false positive

  #7480 opened Dec 26, 2021

• LGTM.com - false póitive-email-nguyenlongquangtit0987@gmail.com.HTML.

  #7479 opened Dec 26, 2021

• LGTM.com - false positive

  #7477 opened Dec 24, 2021

• LGTM.com - false positive - For loop variable is not used in the loop body

  #7461 opened Dec 20, 2021

14 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Ruby: Add support for GraphQL

  #7126 commented on Dec 22, 2021 • 6 new comments

• Ruby: Flow through arrays/enumerables

  #7198 commented on Dec 22, 2021 • 4 new comments

• [LGTM.com - false positive] py/conflicting-attributes for abstract and concrete attribute

  #7451 commented on Dec 21, 2021 • 2 new comments

• Java: CWE-927 - Query to detect the use of implicit PendingIntents

  #6779 commented on Dec 21, 2021 • 2 new comments

• Ruby: Add `rb/weak-cookie-configuration` query

  #7313 commented on Dec 22, 2021 • 2 new comments

• C++: split `cpp/overrunning-write` into two

  #7386 commented on Dec 22, 2021 • 2 new comments

• Ruby: Add Module#const_get as a code execution

  #7419 commented on Dec 21, 2021 • 2 new comments

• QL: Add query detecting suspiciously missing parameters from the QLDoc of a predicate

  #7450 commented on Dec 20, 2021 • 2 new comments

• Unknown kind "Table" in query meta-data

  #7453 commented on Dec 20, 2021 • 1 new comment

• Ruby: Rails route resolution

  #7061 commented on Dec 21, 2021 • 1 new comment

• Java: Publish framework coverage metrics

  #7292 commented on Dec 21, 2021 • 1 new comment

• Java: Start running telemetry queries on Code Scanning

  #7417 commented on Dec 21, 2021 • 1 new comment

• Solorigate: Extract to separate qlpack

  #7431 commented on Dec 20, 2021 • 1 new comment

• Ruby: Resolve simple string interpolations

  #7334 commented on Dec 22, 2021 • 0 new comments