Skip to content

Pull requests: github/codeql

New pull request New
400 Open 16,641 Closed
400 Open 16,641 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Add tree-sitter-swift extractor scaffolding and YEAST desugaring documentation
#21812 opened May 7, 2026 by asgerf Contributor • Draft
1
CFG: Consider logical not a post order operation.
#21811 opened May 7, 2026 by michaelnebel Contributor • Draft
yeast: Align query semantics more closely with tree-sitter documentation no-change-note-required This PR does not need a change note
#21810 opened May 7, 2026 by tausbn Contributor Loading…
5
Cfg: Rework CFG for switch case patterns. C# Java no-change-note-required This PR does not need a change note
#21808 opened May 7, 2026 by aschackmull Contributor Loading…
4
Java: improve qhelp for java/unsafe-deserialization documentation Java
#21807 opened May 7, 2026 by owen-mc Contributor Loading…
4
Shared: Improvements to SensitiveDataHeuristics.qll javascript Pull requests that update Javascript code Python Rust Pull requests that update Rust code Swift
#21806 opened May 6, 2026 by geoffw0 Contributor • Draft
1 of 7 tasks
Update CWE-918 model coverage for Apache HttpClient execute sinks documentation Java
#21804 opened May 6, 2026 by Copilot AI Loading…
@owen-mc
5
Adjust alert location UntrustedCheckoutCritical Actions Analysis of GitHub Actions documentation
#21800 opened May 5, 2026 by knewbury01 Contributor Loading…
2
Add UseMemoDirective and UseNoMemoDirective classes documentation JS
#21796 opened May 5, 2026 by mattcosta7 Member Loading…
1
Rust: Move more type inference logic into shared library Rust Pull requests that update Rust code
#21795 opened May 5, 2026 by hvitved Contributor • Draft
7
Enable local threat-model by default
#21792 opened May 5, 2026 by jacknojo Contributor • Draft
C# 14: Support for user-defined increment and decrement operators. C#
#21791 opened May 5, 2026 by michaelnebel Contributor • Draft
Go: add experimental query for IDNA digit-fold IP-literal smuggling documentation Go
#21784 opened May 4, 2026 by astrogilda Loading…
17
Go: In overlay mode, discard struct types and their fields Go
#21779 opened Apr 30, 2026 by owen-mc Contributor • Draft
Add MaDs for Jakarta REST library Java
#21776 opened Apr 29, 2026 by jacknojo Contributor • Draft
1
Add MaDs for Apache Avro Java
#21754 opened Apr 24, 2026 by jacknojo Contributor • Draft
12
Bump rules_cc from 0.2.17 to 0.2.18 bazel Pull requests that update bazel code dependencies Pull requests that update a dependency file
#21746 opened Apr 23, 2026 by dependabot Bot Loading…
Fix/path injection read subkind documentation Java
#21741 opened Apr 21, 2026 by MarkLee131 Contributor Loading…
5 tasks done
1
23
docs: Add 'Customizing library models for Rust' documentation documentation ready-for-doc-review This PR requires and is ready for review from the GitHub docs team.
#21727 opened Apr 17, 2026 by coadaflorin Contributor Loading…
53
Python: Add self-validating CFG tests no-change-note-required This PR does not need a change note Python
#21724 opened Apr 16, 2026 by tausbn Contributor • Draft
12
py/tarslip: detect shutil.unpack_archive and subprocess tar extraction Python
#21720 opened Apr 16, 2026 by Copilot AI • Draft
1
@hvitved
8
Bump rules_nodejs from 6.7.3 to 6.7.4 bazel Pull requests that update bazel code dependencies Pull requests that update a dependency file
#21717 opened Apr 16, 2026 by dependabot Bot Loading…
Bump rules_shell from 0.7.1 to 0.8.0 bazel Pull requests that update bazel code dependencies Pull requests that update a dependency file
#21716 opened Apr 16, 2026 by dependabot Bot Loading…
Rust: Upgrade to rust-analyzer 0.328 Ruby Rust Pull requests that update Rust code
#21714 opened Apr 15, 2026 by tausbn Contributor • Draft
11
Bump the cargo group across 1 directory with 2 updates dependencies Pull requests that update a dependency file
#21705 opened Apr 14, 2026 by dependabot Bot Loading…
ProTip! Adding no:label will show everything without a label.