Sitelet https://web.archive.org/web/20220221210229/https://github.com/github/codeql/pulls
Skip to content
New pull request New
181 Open 6,327 Closed
181 Open 6,327 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀
QLSpeciifcation: Add documentation for expression pragmas
documentation
#8156 opened Feb 21, 2022 by alexet • Review required
@ginsbach
Java: Exclude files with errors from modulus analysis
Java no-change-note-required
#8155 opened Feb 21, 2022 by smowton • Review required
C# Exclude dynamic casts from useless casts check
C#
#8152 opened Feb 21, 2022 by tamasvajk • Draft
JS: Separate the ML model for ML-powered queries into its own pack
JS
#8151 opened Feb 21, 2022 by henrymercer • Review required
JS: preparation for sharing MaD library based on API graphs
JS
#8150 opened Feb 21, 2022 by asgerf • Draft
Shared: use shared access path syntax to parse arguments in CSV rows
C# Java JS no-change-note-required Ruby
#8149 opened Feb 21, 2022 by asgerf • Draft
2
JS: cache RegExpCreationNode::getAReference
JS no-change-note-required
#8147 opened Feb 21, 2022 by erik-krogh • Review required
QL: add ql-for-ql query for detecting bad predicate qldoc
JS no-change-note-required QL-for-QL
#8143 opened Feb 21, 2022 by erik-krogh • Review required
Ruby: Add IncompleteMultiCharSanitization query
Ruby
#8142 opened Feb 21, 2022 by hmac • Draft
Port Java sign analysis to semantic layer
Java
#8068 opened Feb 18, 2022 by dbartol • Draft
1
Python: Add data-flow through Django ORM models
documentation Python
#8061 opened Feb 17, 2022 by RasmusWL • Draft
1
C++: new query for insufficient key strength
C++ documentation
#8059 opened Feb 16, 2022 by rdmarsh2 • Review required
4
9
CWE-552: Switch to the shared PathSanitizer library
Java
#8055 opened Feb 16, 2022 by luchua-bc • Approved
4
1
JS: split request forgery query into server-side and client-side variants
C# documentation JS Ruby
#8054 opened Feb 16, 2022 by asgerf • Review required
4
5
C#: Refactor Structural Comparison for Control Flow Elements.
C# no-change-note-required
#8038 opened Feb 15, 2022 by michaelnebel • Review required
2
5
Java: Add Guard Classes for checking OS
documentation Java
#8032 opened Feb 14, 2022 by JLLeitschuh • Review required
1
25
C++: Cache getLocation on Instruction and Operand
C# C++
#8030 opened Feb 14, 2022 by MathiasVP • Draft
2
Python: Fix bad fastTC in ASTNode::contains
no-change-note-required Python
#8028 opened Feb 14, 2022 by tausbn • Review required
1
6
JS: Functionality from untrusted sources query (CWE-830)
documentation JS
#8014 opened Feb 14, 2022 by kaeluka • Review required
77
Add query to detect ZipSlip
documentation Python
#8004 opened Feb 14, 2022 by ahmed532009 • Review required
@tausbn
Introduce semantic layer to prepare to share range analysis
C# C++ Java
#7986 opened Feb 11, 2022 by dbartol • Draft
Ruby: separate constant propagation of regexps from strings
Ruby
#7985 opened Feb 11, 2022 by nickrolfe • Review required
1
JS: Taint analysis for win paths [DRAFT]
JS
#7968 opened Feb 11, 2022 by kaeluka • Draft
2
C++: Improve cpp/system-data-exposure
C++ documentation
#7933 opened Feb 10, 2022 by geoffw0 • Review required
16
C++: Add table that identifies C++ structured bindings
C++ depends on internal PR documentation
#7928 opened Feb 10, 2022 by jketema • Approved
10
ProTip! Add no:assignee to see everything that’s not assigned.