Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
10k
Code
Issues
997
Pull requests
454
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
shared
dataflow
codeql
dataflow
internal
on
main
User selector
All users
Datepicker
All time
Commit history
Commits on Aug 14, 2026
Address review comments
hvitved
committed
4fda454
View commit details
Copy full SHA for 4fda454
View code at this point
Browse repository at this point
FlowSummaryImpl: Fix CP
hvitved
committed
163e3ca
View commit details
Copy full SHA for 163e3ca
View code at this point
Browse repository at this point
FlowSummaryImpl: Embed AST nodes in source/sink summary nodes for better flow paths
hvitved
committed
d4cefad
View commit details
Copy full SHA for d4cefad
View code at this point
Browse repository at this point
FlowSummaryImpl: Introduce `Make2` parameterization
hvitved
committed
7e1f7ed
View commit details
Copy full SHA for 7e1f7ed
View code at this point
Browse repository at this point
Commits on Aug 13, 2026
Data flow: Remove unused variable
hvitved
committed
aa48658
View commit details
Copy full SHA for aa48658
View code at this point
Browse repository at this point
Update shared/dataflow/codeql/dataflow/internal/DataFlowImpl.qll
Show description for ccbab33
hvitved
and
aschackmull
authored
ccbab33
View commit details
Copy full SHA for ccbab33
View code at this point
Browse repository at this point
Commits on Aug 12, 2026
Data flow: Earlier pruning based on `accessPathLimit`
hvitved
committed
6b3afee
View commit details
Copy full SHA for 6b3afee
View code at this point
Browse repository at this point
Commits on Jun 26, 2026
Shared: Fix grammar.
MathiasVP
committed
caef09b
View commit details
Copy full SHA for caef09b
View code at this point
Browse repository at this point
Commits on Jun 25, 2026
Shared: Remove useless existential.
MathiasVP
committed
84a3435
View commit details
Copy full SHA for 84a3435
View code at this point
Browse repository at this point
Commits on Jun 23, 2026
Shared: Support "reverse flow" summaries. That is, summaries starting from the return value of a call.
MathiasVP
committed
bb2ec12
View commit details
Copy full SHA for bb2ec12
View code at this point
Browse repository at this point
Commits on Apr 23, 2026
Shared: Remove deprecated code
hvitved
committed
90ae086
View commit details
Copy full SHA for 90ae086
View code at this point
Browse repository at this point
Commits on Apr 14, 2026
Merge pull request #21584 from owen-mc/shared/update-mad-comments
Show description for 7458674
owen-mc
authored
7458674
View commit details
Copy full SHA for 7458674
View code at this point
Browse repository at this point
Commits on Apr 9, 2026
Merge pull request #21592 from hvitved/dataflow/source-call-context-type-flow
Show description for 33cc887
hvitved
authored
33cc887
View commit details
Copy full SHA for 33cc887
View code at this point
Browse repository at this point
Fix CP in `typeFlowParamType`
Show description for d704b75
hvitved
committed
d704b75
View commit details
Copy full SHA for d704b75
View code at this point
Browse repository at this point
Commits on Apr 7, 2026
Shared: Respond to review comments.
MathiasVP
committed
e06294b
View commit details
Copy full SHA for e06294b
View code at this point
Browse repository at this point
Address review comments
hvitved
committed
0d4524f
View commit details
Copy full SHA for 0d4524f
View code at this point
Browse repository at this point
Data flow: Add hook for preventing lambda dispatch in source call contexts
hvitved
committed
1e1a873
View commit details
Copy full SHA for 1e1a873
View code at this point
Browse repository at this point
Commits on Apr 2, 2026
Shared: Also expose dataflow stage 1's forward flow predicate.
MathiasVP
committed
4d8b782
View commit details
Copy full SHA for 4d8b782
View code at this point
Browse repository at this point
Commits on Mar 27, 2026
Replace `branch` with `acceptingValue`
owen-mc
committed
37aac05
View commit details
Copy full SHA for 37aac05
View code at this point
Browse repository at this point
Replace `acceptingvalue` with `acceptingValue`
owen-mc
committed
a7fdc4b
View commit details
Copy full SHA for a7fdc4b
View code at this point
Browse repository at this point
Commits on Mar 20, 2026
Add `FlowBarrierGuard` to FlowBarrier.qll
owen-mc
committed
7d65bac
View commit details
Copy full SHA for 7d65bac
View code at this point
Browse repository at this point
Shared: Add `barrierElement` in FlowSummaryImpl.qll
owen-mc
committed
f455054
View commit details
Copy full SHA for f455054
View code at this point
Browse repository at this point
Commits on Mar 4, 2026
Address review comments
hvitved
committed
db491fc
View commit details
Copy full SHA for db491fc
View code at this point
Browse repository at this point
Data flow: Add `FeatureEscapesSourceCallContext(OrEqualSourceSinkCallContext)` flow feature
hvitved
committed
189c160
View commit details
Copy full SHA for 189c160
View code at this point
Browse repository at this point
Commits on Jan 26, 2026
Shared: Shadow `hasManualModel` in `RelevantSummarizedCallable`
hvitved
committed
df09f02
View commit details
Copy full SHA for df09f02
View code at this point
Browse repository at this point
Shared: Provenance-based filtering of flow summaries
hvitved
committed
4ce04e4
View commit details
Copy full SHA for 4ce04e4
View code at this point
Browse repository at this point
Commits on Dec 12, 2025
Shared: Prefer source/sink models with manual provenance over generated
hvitved
committed
c4a8e9d
View commit details
Copy full SHA for c4a8e9d
View code at this point
Browse repository at this point
Commits on Dec 11, 2025
Java: Add support for boolean MaD barrier guards.
aschackmull
committed
8da65ec
View commit details
Copy full SHA for 8da65ec
View code at this point
Browse repository at this point
Java: Basic support for pass-through barrier models.
aschackmull
committed
d24b0ff
View commit details
Copy full SHA for d24b0ff
View code at this point
Browse repository at this point
Commits on Dec 4, 2025
Merge pull request #20961 from aschackmull/dataflow/flowfrom
Show description for 607ad1f
aschackmull
authored
607ad1f
View commit details
Copy full SHA for 607ad1f
View code at this point
Browse repository at this point
Commits on Dec 3, 2025
Merge pull request #20915 from hvitved/content-flow-ap-limit
Show description for ca9d327
hvitved
authored
ca9d327
View commit details
Copy full SHA for ca9d327
View code at this point
Browse repository at this point
Dataflow: Add flowFrom predicates to mirror flowTo.
aschackmull
committed
4191b18
View commit details
Copy full SHA for 4191b18
View code at this point
Browse repository at this point
Commits on Dec 1, 2025
Shared: Improvements to content-sensitive model generation
hvitved
committed
666855d
View commit details
Copy full SHA for 666855d
View code at this point
Browse repository at this point
Commits on Nov 26, 2025
Add QLDoc explaining `reverseRead`
owen-mc
committed
9481fc9
View commit details
Copy full SHA for 9481fc9
View code at this point
Browse repository at this point
Shared: allow exclusions to `localFlowIsLocal`
owen-mc
committed
a2e6848
View commit details
Copy full SHA for a2e6848
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.