Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
10k
Code
Issues
996
Pull requests
451
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
java
ql
src
Security
on
codeql-cli/v2.15.2
User selector
All users
Datepicker
All time
Commit history
Commits on Oct 24, 2023
Autoformat
smowton
committed
e8c9708
View commit details
Copy full SHA for e8c9708
View code at this point
Browse repository at this point
Mass rename L/RValue -> VarWrite/Read
smowton
authored
ac38d4c
View commit details
Copy full SHA for ac38d4c
View code at this point
Browse repository at this point
Add aliases for public, importable renamed classes and predicates.
Show description for 59a49ee
smowton
authored
59a49ee
View commit details
Copy full SHA for 59a49ee
View code at this point
Browse repository at this point
Mass-rename MethodAccess -> MethodCall
smowton
authored
f552a15
View commit details
Copy full SHA for f552a15
View code at this point
Browse repository at this point
Commits on Oct 16, 2023
Java: Improve java/spring-disabled-csrf-protection
atorralba
committed
d08ee76
View commit details
Copy full SHA for d08ee76
View code at this point
Browse repository at this point
Commits on Sep 18, 2023
Java: Further alert message improvement
Show description for 874f91c
intrigus-lgtm
and
atorralba
authored
874f91c
View commit details
Copy full SHA for 874f91c
View code at this point
Browse repository at this point
Commits on Sep 12, 2023
Java: Fix alert message
Show description for b6417ca
intrigus-lgtm
committed
b6417ca
View commit details
Copy full SHA for b6417ca
View code at this point
Browse repository at this point
Commits on Aug 17, 2023
Apply docs review suggestions
Show description for 8d88af1
egregius313
and
sabrowning1
committed
8d88af1
View commit details
Copy full SHA for 8d88af1
View code at this point
Browse repository at this point
Use more appropriate description
egregius313
committed
b305962
View commit details
Copy full SHA for b305962
View code at this point
Browse repository at this point
Typos and style fixes
Show description for 929090a
egregius313
and
atorralba
committed
929090a
View commit details
Copy full SHA for 929090a
View code at this point
Browse repository at this point
Documentation fixes
egregius313
committed
172b8a6
View commit details
Copy full SHA for 172b8a6
View code at this point
Browse repository at this point
Documentation
egregius313
committed
b567ec8
View commit details
Copy full SHA for b567ec8
View code at this point
Browse repository at this point
Trust Boundary Work
egregius313
committed
f58590c
View commit details
Copy full SHA for f58590c
View code at this point
Browse repository at this point
Style fixes
egregius313
committed
3e7444c
View commit details
Copy full SHA for 3e7444c
View code at this point
Browse repository at this point
Add missing security severity
egregius313
committed
1537050
View commit details
Copy full SHA for 1537050
View code at this point
Browse repository at this point
Convert trust boundary models to MaD
egregius313
committed
a8b7e70
View commit details
Copy full SHA for a8b7e70
View code at this point
Browse repository at this point
Trust Boundary Query
egregius313
committed
76438f1
View commit details
Copy full SHA for 76438f1
View code at this point
Browse repository at this point
Commits on Jul 13, 2023
C#/Java/Ruby: Remove superfluous module members.
aschackmull
committed
91de43f
View commit details
Copy full SHA for 91de43f
View code at this point
Browse repository at this point
Commits on Jun 27, 2023
Merge pull request #12879 from atorralba/atorralba/java/command-injection-mad-sinks
Show description for a7c2a25
atorralba
authored
a7c2a25
View commit details
Copy full SHA for a7c2a25
View code at this point
Browse repository at this point
Commits on Jun 19, 2023
Adjust ZipSlip query description according to review suggestions.
atorralba
committed
8f6d2ed
View commit details
Copy full SHA for 8f6d2ed
View code at this point
Browse repository at this point
Apply code review suggestions.
Show description for 3c4d938
atorralba
and
asgerf
committed
3c4d938
View commit details
Copy full SHA for 3c4d938
View code at this point
Browse repository at this point
Commits on Jun 16, 2023
Go/Java/JS/Python/Ruby: Update the description and qhelp of the ZipSlip query
Show description for 3e96fe6
atorralba
committed
3e96fe6
View commit details
Copy full SHA for 3e96fe6
View code at this point
Browse repository at this point
Commits on Jun 13, 2023
Merge branch 'main' into atorralba/java/command-injection-mad-sinks
atorralba
authored
ffe6768
View commit details
Copy full SHA for ffe6768
View code at this point
Browse repository at this point
Commits on Jun 2, 2023
Add PathCreation.qll sinks to models-as-data
Show description for 527fe52
atorralba
committed
527fe52
View commit details
Copy full SHA for 527fe52
View code at this point
Browse repository at this point
Merge branch 'main' into atorralba/java/command-injection-mad-sinks
atorralba
authored
c3b1ef2
View commit details
Copy full SHA for c3b1ef2
View code at this point
Browse repository at this point
Commits on May 25, 2023
also fix the first code-block
erik-krogh
committed
9f5bf8f
View commit details
Copy full SHA for 9f5bf8f
View code at this point
Browse repository at this point
fix whitespace in the samples in ReDoS.qhelp
erik-krogh
committed
765076b
View commit details
Copy full SHA for 765076b
View code at this point
Browse repository at this point
Convert all command injection sinks to MaD format
atorralba
committed
a276cc3
View commit details
Copy full SHA for a276cc3
View code at this point
Browse repository at this point
Commits on May 21, 2023
apply suggestions from doc review
erik-krogh
committed
710b309
View commit details
Copy full SHA for 710b309
View code at this point
Browse repository at this point
Commits on May 17, 2023
avoid contractions
erik-krogh
committed
480e71f
View commit details
Copy full SHA for 480e71f
View code at this point
Browse repository at this point
Commits on May 15, 2023
trim the whitespace in the poly-redos examples
erik-krogh
committed
83ca149
View commit details
Copy full SHA for 83ca149
View code at this point
Browse repository at this point
add another example to the qhelp in poly-redos, showing how to just limit the length of the input
erik-krogh
committed
d989359
View commit details
Copy full SHA for d989359
View code at this point
Browse repository at this point
Commits on May 4, 2023
Privacy markers and fixed imports
egregius313
committed
5f3c8fe
View commit details
Copy full SHA for 5f3c8fe
View code at this point
Browse repository at this point
Add improper validation of array size query libraries
egregius313
committed
74fc638
View commit details
Copy full SHA for 74fc638
View code at this point
Browse repository at this point
Add TempDirLocalInformationDisclosureQuery
egregius313
committed
c319ee4
View commit details
Copy full SHA for c319ee4
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.