github / codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

https://codeql.github.com

github/codeql Issues

Ruby: ERB parse failure with trailing implicit keyword argument
Updated 18 days ago1
General issue
Updated 18 days ago3
False positive: clear-text logging of X.509 certificate
Updated 18 days ago5
C# builds fails when invoking command from dotnet tools
Closed 18 days ago4
UAF not flagged
Updated 19 days ago1
How to create a mapping of key value pairs?
Updated 19 days ago2
How to solve "Referenced pack 'XXX' was found in multiple locations"?
Updated 19 days ago1
[C++] querying was stuck on Call.getArgument without detailed log
Updated 21 days ago2
codeql stuck for 30+ minutes during FindHDF5.cmake execution
Updated 21 days ago3
CodeQL fails to extract info of certain source files when compiling chromium v8
Updated 22 days ago7
Python: open redirect protection example is still vulnerable
Updated 22 days ago2
[cpp] for C code, query variable does not extract all variables (mostly const variable and not ram variable)
Updated 23 days ago3
General issuexsBNBFmUaEEBCACzXTDt6ZnyaVtueZASBzgnAmK13q9Urgch+sKYeIhdymjuMQta
Closed 23 days ago
Codeql database create fails when building mozilla
Updated 25 days ago7
Mapping CWEs to a Codeql Query
Closed a month ago4
Disable js/unsafe-external-link by default
Closed a month ago2
"Could not start Node.js" issue when building database with cluster-db option
Closed a month ago1
cant find taint flow in a LocalVariable statement
Updated a month ago7
Java - Taint propagation across visitor pattern + lambdas
Closed a month ago15
JS MaD: the `Instance` access path component does not match subclasses of the selected class
Updated a month ago
Codeql using open-api generator does not take into consideration .openapi-generator-ignore
Updated a month ago3
Ruby: support sprintf formatted string with modulo operator
Updated a month ago
Is default setup of Codeql blocking the (SARIF file)results from my external CI ?
Closed a month ago2
How to pass custom settings.xml for java instead of fetching it from .m2 folder
Closed a month ago4
[Question][Java] Yaml summaryModel question
Closed a month ago7
C++: extractor fails when compiling with custom clang build
Closed a month ago4
False positive for `go/incomplete-hostname-regexp` and `\Q`
Updated a month ago1
ERROR: Uncaught Windows exception (EXCEPTION_STACK_OVERFLOW)
Updated a month ago7
Chromium build snapshot missing several functions
Updated a month ago1
Ruby: support HAML template files
Updated a month ago1
Create AOSP C/C++ database in a easy way ?
Closed a month ago1
Path-problem result pattern
Updated a month ago6
General issue: CodeQL seems to hang after 44s and stops after 6h
Updated a month ago3
Including All Query Results in .sarif File
Updated a month ago1
Linux arm64 Support
Closed a month ago2
codeql unable to correctly parse a valid js file
Closed a month ago2
[Java] Extract all unit test methods and the methods they call
Updated a month ago1
CodeQL failed to compile C# program based on Unity
Updated a month ago1
False positive - Log entries created from user input (cs/log-forging)
Updated a month ago1
Unable to detect SQL injection vulnerability in gorm framework in go language
Closed a month ago8
Issues found but "Sorry, we couldn't find this file in the repository."
Closed a month ago2
CodeQL compilation error in Strings.qll
Closed 2 months ago1
General issue
Closed 2 months ago
Ruby ActiveRecord modeling misses multilevel inheriting classes
Closed 2 months ago2
False positive
Updated 2 months ago
Global taint tracking time complexity?
Closed 2 months ago5
False positives in cpp/use-after-free
Updated 2 months ago1
C sharp build is failing after enabling AdvancedSecurity-Codeql-Init@1
Updated 2 months ago12
False positive: Java: Uncontrolled data used in path expression
Updated 2 months ago1
firist issue
Closed 2 months ago