Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
10k
Code
Issues
995
Pull requests
452
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
python
ql
src
Security
on
codeql-cli/v2.15.5
User selector
All users
Datepicker
All time
Commit history
Commits on Nov 8, 2023
Merge pull request #14603 from github/max-schaefer/broken-crypto-algorithm-link
Show description for 43d9d2c
RasmusWL
authored
43d9d2c
View commit details
Copy full SHA for 43d9d2c
View code at this point
Browse repository at this point
Commits on Nov 7, 2023
Update dead link.
geoffw0
committed
e8a466a
View commit details
Copy full SHA for e8a466a
View code at this point
Browse repository at this point
Commits on Oct 27, 2023
Address review comment.
Max Schaefer
committed
104700f
View commit details
Copy full SHA for 104700f
View code at this point
Browse repository at this point
Commits on Oct 26, 2023
Autoformat.
Max Schaefer
committed
08cc8b8
View commit details
Copy full SHA for 08cc8b8
View code at this point
Browse repository at this point
Include more details in the message for `py/weak-cryptographic-algorithm`.
Show description for 3939167
Max Schaefer
committed
3939167
View commit details
Copy full SHA for 3939167
View code at this point
Browse repository at this point
Commits on Sep 29, 2023
Merge pull request #14070 from yoff/python/promote-nosql-query
Show description for dbecb1b
yoff
authored
dbecb1b
View commit details
Copy full SHA for dbecb1b
View code at this point
Browse repository at this point
Python: NoSQLInjection -> NoSqlInjection
RasmusWL
committed
16e1a00
View commit details
Copy full SHA for 16e1a00
View code at this point
Browse repository at this point
Commits on Sep 28, 2023
Python: fix query file
yoff
committed
d90630a
View commit details
Copy full SHA for d90630a
View code at this point
Browse repository at this point
Commits on Sep 7, 2023
add new qhelp for clear-text-logging
erik-krogh
committed
bf3fe3c
View commit details
Copy full SHA for bf3fe3c
View code at this point
Browse repository at this point
Python: Fix typo in SSRF example
RasmusWL
committed
c85ea9a
View commit details
Copy full SHA for c85ea9a
View code at this point
Browse repository at this point
Python: Refactor to allow customizations
Show description for 087961d
yoff
committed
087961d
View commit details
Copy full SHA for 087961d
View code at this point
Browse repository at this point
Python: rename file
yoff
committed
db04597
View commit details
Copy full SHA for db04597
View code at this point
Browse repository at this point
Python: Make things compile in their new location
Show description for 55707d3
yoff
committed
55707d3
View commit details
Copy full SHA for 55707d3
View code at this point
Browse repository at this point
Python: prepare to promote NoSqlInjection
Show description for 60dc1af
yoff
committed
60dc1af
View commit details
Copy full SHA for 60dc1af
View code at this point
Browse repository at this point
Commits on Aug 28, 2023
Python: Move `UntrustedDataToExternalAPI` to new dataflow API
RasmusWL
committed
acde192
View commit details
Copy full SHA for acde192
View code at this point
Browse repository at this point
Python: Move `FullServerSideRequestForgery` and `PartialServerSideRequestForgery` to new dataflow API
RasmusWL
committed
657b199
View commit details
Copy full SHA for 657b199
View code at this point
Browse repository at this point
Python: Move `HardcodedCredentials` to new dataflow API
RasmusWL
committed
dbfe517
View commit details
Copy full SHA for dbfe517
View code at this point
Browse repository at this point
Python: Move `XmlBomb` to new dataflow API
RasmusWL
committed
46322b7
View commit details
Copy full SHA for 46322b7
View code at this point
Browse repository at this point
Python: Move `RegexInjection` to new dataflow API
RasmusWL
committed
add1077
View commit details
Copy full SHA for add1077
View code at this point
Browse repository at this point
Python: Move `PolynomialReDoS` to new dataflow API
RasmusWL
committed
c6caf83
View commit details
Copy full SHA for c6caf83
View code at this point
Browse repository at this point
Python: Move `XpathInjection` to new dataflow API
RasmusWL
committed
4c33699
View commit details
Copy full SHA for 4c33699
View code at this point
Browse repository at this point
Python: Move `Xxe` to new dataflow API
RasmusWL
committed
60e4533
View commit details
Copy full SHA for 60e4533
View code at this point
Browse repository at this point
Python: Move `UrlRedirect` to new dataflow API
RasmusWL
committed
4c76ca6
View commit details
Copy full SHA for 4c76ca6
View code at this point
Browse repository at this point
Python: Move `UnsafeDeserialization` to new dataflow API
RasmusWL
committed
6f08e73
View commit details
Copy full SHA for 6f08e73
View code at this point
Browse repository at this point
Python: Move `WeakSensitiveDataHashing` to new dataflow API
Show description for dd07417
RasmusWL
committed
dd07417
View commit details
Copy full SHA for dd07417
View code at this point
Browse repository at this point
Python: Move `CleartextStorage` to new dataflow API
RasmusWL
committed
9d6b96d
View commit details
Copy full SHA for 9d6b96d
View code at this point
Browse repository at this point
Python: Move `CleartextLogging` to new dataflow API
RasmusWL
committed
7009544
View commit details
Copy full SHA for 7009544
View code at this point
Browse repository at this point
Python: Move `PamAuthorization` to new dataflow API
RasmusWL
committed
cca78f3
View commit details
Copy full SHA for cca78f3
View code at this point
Browse repository at this point
Python: Move `StackTraceExposure` to new dataflow API
RasmusWL
committed
dcd9608
View commit details
Copy full SHA for dcd9608
View code at this point
Browse repository at this point
Python: Move `LogInjection` to new dataflow API
RasmusWL
committed
f75e65c
View commit details
Copy full SHA for f75e65c
View code at this point
Browse repository at this point
Python: Move `CodeInjection` to new dataflow API
RasmusWL
committed
88cf9c9
View commit details
Copy full SHA for 88cf9c9
View code at this point
Browse repository at this point
Python: Move `LdapInjection` to new dataflow API
Show description for 0557390
RasmusWL
committed
0557390
View commit details
Copy full SHA for 0557390
View code at this point
Browse repository at this point
Python: Move `ReflectedXss` to new dataflow API
RasmusWL
committed
c360346
View commit details
Copy full SHA for c360346
View code at this point
Browse repository at this point
Python: Move `CommandInjection` to new dataflow API
RasmusWL
committed
b30142c
View commit details
Copy full SHA for b30142c
View code at this point
Browse repository at this point
Python: Move `UnsafeShellCommandConstruction` to new dataflow API
RasmusWL
committed
700841e
View commit details
Copy full SHA for 700841e
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.
Max Schaefer